Classifying an operating environment of a remote computer

A system for classifying an operating environment of a remote computer, the system comprising:

• a policy server that:
• maintains a list of zones of trust in memory, each zone of trust associated with a set of resources,
• selects a zone of trust from the list of zones of trust, wherein the selected zone of trust is defined by a signature comprising one or more literal values concerning a computer state, and
• compares the one or more literal values with a corresponding state of the operating environment of the authenticated remote computer;
• and
• an end point control server for classifying the operating environment of the authenticated remote computer into the selected zone of trust when the one or more literal values are true for the operating environment, wherein classification into the selected zone of trust includes access to the set of resources associated with the selected zone of trust, and wherein the list of zones of trust is further associated with a community of one or more users within a realm, the realm including one or more authorized users each associated with a remote computer and an authentication server.

A non-transitory computer readable storage medium having embodied thereon a program, the program being executable by a processor to perform a method for classifying an operating environment of a remote computer, the method comprising:

• maintaining a list of zones of trust in memory, each zone of trust associated with a set of resources;
• selecting a zone of trust from the list of zones of trust, wherein the selected zone of trust is defined by a signature comprising one or more literal values concerning a computer state;
• comparing the one or more literal values with a corresponding state of the operating environment of the remote computer;
• and
• classifying the operating environment of the remote computer into the selected zone of trust when the one or more literal values are true for the operating environment wherein classification into the selected zone of trust includes access to the set of resources associated with the selected zone of trust, and wherein the list of zones of trust is further associated with a community of one or more users within a realm, the realm including one or more authorized users each associated with a remote computer and an authentication server.