Method and system for performing a security check

A system comprising:

• a server to:
• receive, based on receiving an indication of a uniform resource locator (URL) entered by a user of a remote device, an indication that the user is attempting to establish a session;
• retrieve, using the URL, a first authorization policy, associated with the session, from a first data structure;
• cause a first security checker, associated with the first authorization policy, to be executed on the remote device;
• receive a user ID associated with the user;
• identify a second authorization policy associated with the user ID;
• determine that the second authorization policy is not the same as the first authorization policy;
• cause a second security checker, associated with the second authorization policy, to be executed on the remote device when the second authorization policy is not the same as the first authorization policy;
• and
• determine a level of access for the user based on a result of the execution of the first security checker or the second security checker.

A method comprising:

• configuring, by a security system and based on an identity of a user attempting to access a remote device, a group of security modules to add one or more independently produced security modules,
• the security modules, of the group of security modules, each implementing one or more security functions that are to be executed on the remote device,
• the one or more independently produced security modules being produced by entities different than an entity that produced the security system,
• the group of security modules including:
• a package manifest section that includes a name of a provider of the security module,
• a security module section that includes an identification of one or more policies supported by the security module, and
• a security framework section that includes a program interface for the security module;
• transmitting, by the security system, the group of security modules to the remote device for execution of the one or more security functions implemented by the security modules at the remote device;
• and
• determining, by the security system, whether to grant, to the user access to the remote device based on a result of the executed one or more security functions.