System and method for controlling access to a computerized entity
The invention provides a method for controlling access to a computerized entity, the method includes the stages of: (i) receiving a request from an entity; (ii) determining whether the request is legitimate; and (iii) generating a response to the request; whereas a response to a legitimate request comprises an encrypted access control information that is responsive to request associated characteristics and to a random value. The invention provides a system for controlling access to a computerized entity, the system includes: (i) the computerized entity; (ii) an intermediate entity, connected to the computerized entity, the intermediate entity is adapted to: (i) receive a request from an entity; determine whether the request is legitimate; and (ii) generate a response to the request; whereas a response to a legitimate request comprises an encrypted access control information that is responsive to request associated characteristics and to a random value.
1 . A method for controlling access to a computerized entity, the method comprising the stages of:
receiving a request from an entity;
determining whether the request is legitimate; and
generating a response to the request; whereas a response to a legitimate request comprises an encrypted access control information that is responsive to request associated characteristics and to a random value.
2 . The method of claim 1 wherein the stage of determining involves applying an intelligence test.
3 . The method of claim 2 further comprising altering the access control information of a legitimate request.
4 . The method of claim 2 wherein the random value is generated during a secured communication session.
5 . The method of claim 2 wherein the access control information comprises a hash value of at least one request associated characteristic and of the random value.
6 . The method of claim 2 wherein the stage of generating a response comprises receiving a response portion from the computerized entity.
7 . The method of claim 1 wherein the request associated characteristics comprise time of request and at least one entity characteristic.
8 . The method of claim 1 wherein the request associated characteristics comprise amount of requests value and an entity communication port.
9 . The method of claim 1 wherein the stage of generating a response comprises generating the random value.
10 . The method of claim 1 wherein the stage of generating a request comprises receiving the random value.
11 . The method of claim 1 wherein the random value is generated during a secured communication session.
12 . The method of claim 1 wherein the access control information comprises a hash value of at least one request associated characteristic and of the random value.
13 . The method of claim 1 wherein the encrypted access control information is valid for a predefined time period.
14 . The method of claim 1 wherein the stage of generating a response comprises receiving a response portion from the computerized entity.
15 . A method for controlling access to a computerized entity, the method comprising the stages of:
receiving a first request from an entity;
determining whether the first request is legitimate and generating a response to the first request; whereas a response to a legitimate request comprises a first encrypted access control information that is responsive to request associated characteristics and to a random value;
receiving a second request and at least a portion of the first encrypted access control information, from the entity; and
determining, at least in response to the portion of the first encrypted access control information, whether the second request is legitimate.
16 . The method of claim 15 wherein the stage of determining if the first request is legitimate involves applying an intelligence test.
17 . The method of claim 15 wherein the stage of generating a response to the first request comprises receiving a first response portion from the computerized entity.
18 . A system for controlling access to a computerized entity, the system comprising:
the computerized entity;
an intermediate entity, coupled to the computerized entity, the intermediate entity is adapted to: (i) receive a request from an entity; determine whether the request is legitimate; and (ii) generate a response to the request; whereas a response to a legitimate request comprises an encrypted access control information that is responsive to request associated characteristics and to a random value.
19 . The system of claim 18 wherein the intermediate entity is adapted to receive a response portion from the computerized entity and send the response to the entity.
20 . The system of claim 18 wherein the intermediate entity is adapted to apply an intelligence test to determine if the request is legitimate.
21 . The system of claim 18 wherein the intermediate entity is adapted to alter the access control information of a legitimate request.
22 . The system of claim 18 wherein the wherein the intermediate entity is adapted to generate the random value during a secured communication session.
23 . The system of claim 18 wherein the wherein the intermediate entity is adapted to encrypt the access control information by applying hash function on at least one request associated characteristic and of the random value.
24 . A computer readable medium having code embodied therein for causing an electronic device to perform the stages of:
receiving a first request from an entity;
determining whether the first request is legitimate and generating a response to the first request; whereas a response to a legitimate request comprises a first encrypted access control information that is responsive to request associated characteristics and to a random value;
receiving a second request and at least a portion of the first encrypted access control information, from the entity; and
determining, at least in response to the portion of the first encrypted access control information, whether the second request is legitimate.