Patent ID: 6377691
Filing Date: 2002-04-23
Classification: H04L

Abstract:
A method in a data processing system for a client protocol component and a server protocol component to facilitate secure communication according to a protocol that allows the server protocol component to release security state information that the client protocol component retains, the client protocol component and the server protocol component being interconnected by a network and communicating over the network, the method comprising:the client protocol component receiving a request for invoking a function of a server computer program from a client computer program, encrypting the request using a key and sending the encrypted request to a server computer via the network; the server protocol component receiving the encrypted request; when the server protocol component possesses the key, the server protocol component decrypting the encrypted request using the key; and when the server protocol component lacks the key after selectively releasing security state information including the key, the server protocol component sending a challenge to the client protocol component; the client protocol component receiving the challenge, encoding the challenge and the key, and sending the encoded challenge and the encoded key to the server protocol component; and the server protocol component receiving the encoded challenge and the encoded key, decoding the encoded challenge and the encoded key, and decrypting the encrypted request using the decoded key.