Technique for authenticating network users

A system for authenticating network users, the system comprising:

• a network interface that facilitates communications between a client device and a network;
• and
• at least one processor that:
• receives, from a client device, a request for connection to the network;
• receives, from the client device, a security context associated with the requested connection, wherein at least a portion of the security context is obtained by the client device prior to the request for connection to the network by scanning the client device for potential security threats before the client device requests to access the network using an agent program previously downloaded to the client device before the request for connection was received;
• causes the security context associated with the requested connection to be evaluated;
• assigns the client device one or more access privileges based at least in part on the evaluation of the security context;
• generates a security token that records the one or more access privileges assigned to the client device;
• and
• downloads the security token to the client device.

A non-transitory computer readable storage medium having computer readable code thereon for authenticating network users, the medium including instructions in which a computer system performs operations comprising:

• receiving, from a client device, a request for connection to a network;
• receiving, from the client device, a security context associated with the requested connection, wherein at least a portion of the security context is obtained by the client device prior to the request for connection to the network by scanning the client device for potential security threats before the client device requests to access the network using an agent program previously downloaded to the client device before the request for connection was received;
• evaluating the security context associated with the requested connection;
• assigning the client device one or more access privileges based at least in part on the evaluation of the security context;
• generating a security token that records the one or more access privileges assigned to the client device;
• and
• downloading the security token to the client device.