EFFICIENT START-UP FOR SECURED CONNECTIONS AND RELATED SERVICES

摘要

One embodiment of the present invention includes an approach for efficient start-up for secured connections and related services. A client machine receives, via an application program, a request to send a secure message to a server machine. The client machine transmits a plurality of messages to the server machine that includes a first message comprising at least two of user authentication data, entity authentication data, key exchange data, and encrypted message data. The client machine receives, from the server machine, a second message that includes a first master token comprising a first set of session keys for encrypting and authenticating messages exchanged with the server machine.

主权项

1. A non-transitory computer-readable storage medium including instructions that, when executed by a processor, cause the processor to perform the steps of:
generating entity authentication data that identifies and authenticates a client machine; generating user authentication data that identifies a user associated with the client machine; generating a first key request for a first plurality of session keys for encrypting and authenticating messages exchanged with the client machine; and transmitting a first message to a server machine that includes the entity authentication data, the user authentication data, and the first key request.