Patent ID: 6094485
Filing Date: 2000-07-25
Classification: H04L

Abstract:
A process for determining the strongest legally permissible level of cryptographic service in an electronic network, comprising the steps of:performing a first handshake between a client and a server to establish a session that uses export strength encryption, wherein a connection is established using an export cipher suite;examining with said client a server certificate obtained as part of said first handshake;transferring application data that are protected by said export cipher suite if said server is not approved for a stronger level of cryptographic service;initiating a second handshake allowing a stronger cipher suite if said server is approved for a stronger level of cryptographic service; andtransferring application data that are protected by said stronger cipher suite;wherein said server certificate is required by said client to determine if said server is approved;wherein said server certificate is not available to said client at the time that it must send said list of cipher suites during said first handshake; andwherein said first handshake must be performed with weaker, export strength cryptography.