I am working on a webby, which would need unique user identification like IP/MAC address. But there is a slight problem with it. Our company is a part of financial group under a bank. Which means they have strict firewall policy and everything that comes trough it comes as the same internal IP, also it will filter some additional information about the user, which I cant use as its again their security policy. Site works with loans, that people can make. Finance department would like to make sure, that one user wont send more 30 requests in a small period of time, etc. etc.
Thus I need to make sure, that the identificator I use is reliable and hard to fake or at least has some sort of consistency AND wont bother user with any additional clicks (ActiveX, installing 3rd party stuff, etc.). Cookies, can be turned off or deleted, IPs can be changed (VPN, dynamic IPs).
Preferably PHP or JS, though JAVA/python, could be used as well. I tried internet, but cant get a straight answer on this.
Any ideas are highly appreciated
Regards
