초록 ▼

A system and a method are described for selecting and initiating security services for communication across computer networks. Negotiation is facilitated between nodes of a computer network to determine whether a security service is to be used, and if so, what particular method of providing the secu

A system and a method are described for selecting and initiating security services for communication across computer networks. Negotiation is facilitated between nodes of a computer network to determine whether a security service is to be used, and if so, what particular method of providing the security service will be used. Communication with a wide range of different computer systems using different methods of providing various security services is thereby facilitated.

대표청구항 ▼

[ We claim:] [1.] In a networked computer environment, a process for determining whether a security service will be used for communication between a first node and a second node, comprising the steps of:selecting in the first node, a first preference value for the security service;selecting in the s

[ We claim:] [1.] In a networked computer environment, a process for determining whether a security service will be used for communication between a first node and a second node, comprising the steps of:selecting in the first node, a first preference value for the security service;selecting in the second node, a second preference value for the security service, at least one of the first or second preference values being selected from a set of values comprising a value representing that the security service is required, a value representing that the security service is rejected, a first intermediate value representing that the security service is preferred but is not essential, and a second intermediate value representing that the security service is not preferred but will be tolerated;communicating between the first and second node at least one of the first or second preference values;comparing the first preference value with the second preference value;determining that the security service will be used when neither the first or second preference values represent that the security service is rejected and both preference values do not include the second intermediate value;determining that the security service will not be used and that communication between the first and second nodes should proceed when both preference values include the second intermediate value, or when one preference value represents that the security service is rejected and the other preference value does not represent that the security service is required; anddetermining that communication between the first and second nodes should not proceed when one of the preference values includes the value representing that the security service is required and the other preference value includes the value representing that the security service is rejected.