Patent ID: 7249373
Filing Date: 2007-07-24
Classification: H04L

Abstract:
1. In a distributed system including a requesting message processor that is communicatively coupled to a validating message processor so as to be able to communicate by transferring electronic messages via a common protocol, a method for determining if a client message processor is a trusted client such that a need to have multiple protocols stacks to transfer security assertions and security responses is reduced at least at the requesting message processor, the method comprising: an act of identifying authentication data of a first format that is to be transferred to the validating message processor; an act of maintaining a security token processing interface for receiving multiple differently formatted portions of authentication data that have been uniformly encapsulated for transfer using the common protocol and for receiving corresponding multiple differently formatted portions of authentication result data that have been uniformly encapsulated for transfer using the common protocol so as to eliminate the need to maintain separate protocol stack for each of the multiple differently formatted portions of authentication data and corresponding multiple differently formatted portions of authentication result data; an act of uniformly encapsulating a portion of the authentication data within a client security token such that the client security token can be processed by a corresponding validating token processing interface at the validating message processor, the uniform encapsulation allowing the portion of authentication data to be sent via the common protocol, the common protocol being readable by the validating message processor, and thereby allowing the client message processor to release any protocol stacks reserved for processing a reply message indicating whether the client message processor is a trusted client; an act of the requesting message processor sending the client security token to the validating message processor; an act of the requesting message processor receiving a response security token from the validating message processor via the common protocol, the response security token uniformly encapsulating a portion of authentication result data of a second format which is different from the first format, wherein the second format is selected based on the portion of authentication data; and an act of processing the response security token to determine if the portion of authentication result data indicates that the client message processor is a trusted client.