Authentication of remote host via closed ports

1. A system for authenticating a communication request sent from a client computing device, the system comprising:

a firewall that initially blocks all incoming traffic regardless of port number, the firewall comprising:

a processing unit operating to perform functions including:

initially blocking the communication request;

creating a first logging event corresponding to the communication request; and

a storage unit, the storage unit storing the communication request and the first logging event; and

a server in data communication with the firewall, the server having a processing unit, the processing unit operating to perform functions including:

receiving notification of the first logging event created by the firewall; authenticating the communication request corresponding to the first logging event using a multi-layer authentication process including a first layer authentication of the communication request that includes generating a second hash of a plurality of clear addresses corresponding to the client computing device by the server using the same hashing algorithm and matching the second hash with the first hash and a second layer authentication of the communication request that includes transmitting a request to the client computing device for a public key corresponding to the server if the first and second hashes match; and

enabling a port in the firewall only if the communication request is authenticated by the first and second layer authentications.

2. The system according to claim 1 , wherein the communication request contains a plurality of clear addresses corresponding to the client computing device and a first hash of the plurality of clear addresses generated by the client computing device using a predetermined hashing algorithm.

3. The system according to claim 1 , wherein the second layer authentication further includes

the firewall

receiving the public key corresponding to the server from the client computing device;

creating a second logging event corresponding to the public key storing the second logging event and the public key in the firewall storage unit;

notifying the server of the second logging event; and

the server

receiving the notification of the second logging event;

acquiring the public key from the firewall; and

testing the public key.

4. The system according to claim 2 , wherein the plurality of clear addresses corresponding to the client computing device include an Internet Protocol Address and a Media Access Control layer address.

5. A method for authenticating a communication request sent from a client computing device directed to a server, the method comprising:

initially blocking the communication request from delivery to the server by a firewall that initially blocks all incoming traffic regardless of port number;

creating a first logging event corresponding to the communication request;

storing the communication request and the first logging event in the firewall;

notifying the server of the first logging event;

authenticating the communication request corresponding to the first logging event by the server using a multi-layer authentication process including a first layer authentication of the communication request that includes generating a second hash of a plurality of clear addresses corresponding to the client computing device by the server using the same hashing algorithm and matching the second hash with the first hash and a second layer authentication of the communication request that includes transmitting a request to the client computing device for a public key corresponding to the server if the first and second hashes match; and

enabling a port in the firewall only if the communication request is authenticated by the first and second layer authentication.

6. The method according to claim 5 , wherein the communication request contains a plurality of clear addresses corresponding to the client computing device and a first hash of the plurality of clear addresses generated by the client computing device using a predetermined hashing algorithm.

7. The method according to claim 5 , wherein the second layer authentication further includes:

receiving the public key from the client computing device, the public key corresponding to the server;

creating a second logging event corresponding to the received public key;

storing the second logging event and the received public key;

notifying the server of the second logging event; and

testing the received public key.

8. The method according to claim 6 , wherein the plurality of clear addresses corresponding to the client computing device include an Internet Protocol Address and a Media Access Control layer address.

9. The method according to claim 5 , wherein the first hash and the second hash further include positional coordinates corresponding to the client computing device.

10. A machine readable storage device having stored thereon a computer program for authenticating a communication request sent from a client computing device directed to a server, the computer program comprising a set of instructions which when executed by a machine causes the machine to perform a method including:

initially blocking the communication request from delivery to the server by a firewall that blocks all incoming traffic regardless of port number;

creating a first logging event corresponding to the communication request;

storing the communication request and the first logging event in the firewall;

notifying the server of the first logging event;

authenticating the communication request corresponding to the first logging event by the server using a multi-layer authentication process including a first layer authentication of the communication request that includes generating a second hash of a plurality of clear addresses corresponding to the client computing device by the server using the same hashing algorithm and matching the second hash with the first hash and a second layer authentication of the communication request that includes transmitting a request to the client computing device for a public key corresponding to the server if the first and second hashes match; and

enabling a port in the firewall only if the communication request is authenticated by the first and second layer authentication.

11. The machine readable storage device according to claim 10 , wherein the communication request contains a plurality of clear addresses corresponding to the client computing device and a first hash of the plurality of clear addresses generated by the client computing device using a predetermined hashing algorithm.

12. The machine readable storage device according to claim 10 , wherein the second layer authentication further includes:

receiving the public key from the client computing device, the public key corresponding to the server;

creating a second logging event corresponding to the received public key;

storing the second logging event and the received public key;

notifying the server of the second logging event; and

testing the received public key.

13. The machine readable storage device according to claim 11 , wherein the plurality of clear addresses corresponding to the client computing device include an Internet Protocol Address and a Media Access Control layer address.

14. The machine readable storage device according to claim 10 , wherein the first hash and the second hash further include positional coordinates corresponding to the client computing device.