Patent ID: 8799630
Filing Date: 2014-08-05
Classification: H04L

Abstract:
1. A method for creating an advanced security negotiation package, implemented at least in part by a computing device, the method comprising: creating an advanced security negotiation protocol under a Simple and Protected Negotiation Mechanism (SPNEGO) protocol, the advanced security negotiation protocol negotiates an authentication scheme; defining a message to protect negotiation data during the advanced security negotiation protocol, the message includes a fixed length header and a variable length payload; generating an initial message including multiple authentication messages to reduce redundant roundtrips alongside a list of supported authentication schemes; generating a per-message token to allow for a flexible plug-in architecture for each of the multiple authentication messages and if a token fails to generate for one or more of the multiple authentication messages, removing the one or more authentication messages from the list of supported authentication schemes; sending the initial message with trust roots and certificate verification associated with the computing device, a selection of a first one of the multiple authentication messages based on the trust roots and certificate verification; receiving a selection of a second one of the multiple authentication messages based on the trust roots and certification, the second one of the multiple authentication messages to replace the first one of the multiple authentication messages; and implementing key exchanges by a mini Security Support Provider (SSP).