Cookie security system with interloper detection and remedial actions to protest personal data

A system for validating requests from a client, comprising:

• an interface for receiving a request from the client, the request including a cryptographically protected object that includes a respective user identifier and a validation value;
• at least one processor;
• a validation procedure, executable by the at least one processor, including:
• a first set of instructions that are invoked when the respective user identifier is valid, the validation value fails a first validation requirement in a predefined manner, and a count of consecutively received cryptographically protected objects whose validation value has failed the first validation requirement is less than a threshold value that is greater than one;
• the first set of instructions including instructions for obtaining user-requested information in accordance with the request and returning to the client a response to the request in accordance with the respective user identifier, the response including the user-requested information and an updated cryptographically protected object that includes the respective user identifier and an updated validation value, and updating the count of consecutively received cryptographically protected objects whose validation value has failed the first validation requirement;
• and
• a second set of instructions that are invoked when the respective user identifier is valid, the validation value fails the first validation requirement in the predefined manner, and the count of consecutively received cryptographically protected objects whose validation value has failed the first validation requirement is equal to or exceeds the threshold value;
• the second set of instructions including instructions for initiating a predefined remedial action.

A non-transitory computer program product for use in conjunction with a computer system, the computer program product comprising a computer readable storage medium and a computer program mechanism embedded therein, the computer program mechanism comprising:

• a first set of instructions that are invoked when a request including a cryptographically protected object that includes a respective user identifier and a validation value is received from a client, the respective user identifier is valid, the validation value fails a first validation requirement in a predefined manner, and a count of consecutively received cryptographically protected objects whose validation value has failed the first validation requirement is less than a threshold value that is greater than one;
• the first set of instructions including instructions for obtaining user-requested information in accordance with the request and returning to the client a response to the request in accordance with the respective user identifier, the response including the user-requested information and an updated cryptographically protected object that includes the respective user identifier and an updated validation value, and updating the count of consecutively received cryptographically protected objects whose validation value has failed the first validation requirement;
• and
• a second set of instructions that are invoked when the respective user identifier is valid, the validation value fails the first validation requirement in the predefined manner, and the count of consecutively received cryptographically protected objects whose validation value has failed the first validation requirement is equal to or exceeds the threshold value;
• the second set of instructions including instructions for initiating a predefined remedial action.