Information security – Access control or authentication – Network
Reexamination Certificate
2006-05-02
2006-05-02
Smithers, Matthew (Department: 2137)
Information security
Access control or authentication
Network
C726S002000, C726S014000, C713S155000, C713S156000, C713S170000, C380S030000, C380S259000, C380S279000, C380S282000, C380S285000
Reexamination Certificate
active
07039946
ABSTRACT:
A method, system, and computer program product for establishing security parameters that are used to exchange data on a secure connection. A piggy-backed key exchange protocol is defined, with which these security parameters are advantageously exchanged. By piggy-backing the key exchange onto other already-required messages (such as a client's HTTP GET request, or the server's response thereto), the overhead associated with setting up a secure browser-to-server connection is minimized. This technique is defined for a number of different scenarios, where the client and server may or may not share an encoding scheme, and is designed to maintain the integrity of application layer communication protocols. In one scenario, a client requests a server to propose a message encoding scheme. If the client has security-sensitive data to transmit with its request, it waits for the proposed scheme before sending this sensitive data to the server. Otherwise, the server may inform the client of the message encoding scheme in the same transmission used to send a response to a client's request.
REFERENCES:
patent: 5708780 (1998-01-01), Levergood et al.
patent: 5793966 (1998-08-01), Amstein et al.
patent: 5875296 (1999-02-01), Shi et al.
patent: 5978840 (1999-11-01), Nguyen et al.
Fielding et al., Hypertext Transfer Protocol HTTP/1.1, Jan. 1997, Network Working Group RFC 2068, pp.: 1-161.
Rescorla et al., “The Secure Hypertext Transfer Protocol,” Network Working Group, RFC 2660, Aug. 1999.
Graham: Web/HTML Documentation and Developer's Resource, sec. 3.4 META, Jan. 5, 1998, <http://www.utotonto.ca/webdocs/webinfo.html>.
Binding Carl
Hild Stefan Georg
Huang Yen-Min
O'Connor Luke James
Shoup Victor John
Callahan Paul
Clay A. Bruce
Doubet Marcia L.
International Business Machines - Corporation
Smithers Matthew
LandOfFree
Piggy-backed key exchange protocol for providing secure,... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Piggy-backed key exchange protocol for providing secure,..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Piggy-backed key exchange protocol for providing secure,... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3562197