Computer network security system employing portable storage device

A method of authenticating interaction with a trusted computer network located behind a bastion host, comprising:

• defining a secure database protected by said bastion host;
• providing a portable storage device;
• providing a user-operable recording mechanism protected by said bastion host by which said user stores first information in said secure database and second information in said portable storage device;
• said first and second information representing components of an encryption key system from which at least one password is generated;
• installing said portable storage device at a client computer and establishing communication between said bastion host and said client computer;
• using said first and second information at said client computer to generate said password and communicating said password to said bastion host;
• evaluating said password at said bastion host and effecting authentication based on correspondence of said password to information stored in said secure database.

A secure network communication system, comprising:

• a screening router;
• an authentication system that authenticates a remote client communicating through said screening router;
• a bastion host having web proxy system in communication with said screening router;
• active session middleware associated with said bastion host that associates an active session with said remote client upon authentication by said authentication system;
• said web proxy system being configured to perform URL verification and URL modification based on information received from said active session middleware and said authentication system.