US 7,591,012 B2
Dynamic negotiation of encryption protocols
Karthik Jaganathan, Redmond, Wash. (US); and Liqiang Zhu, Kirkland, Wash. (US)
Assigned to Microsoft Corporation, Redmond, Wash. (US)
Filed on Mar. 02, 2004, as Appl. No. 10/791,035.
Prior Publication US 2005/0198490 A1, Sep. 08, 2005
Int. Cl. H04L 9/18 (2006.01); H04L 29/00 (2006.01)
U.S. Cl. 726—14  [380/278] 23 Claims
OG exemplary drawing
 
1. A method employed on a server computer for switching from a first encryption algorithm to a second encryption algorithm, comprising:
receiving an encryption algorithm negotiation request from a client computer, wherein the encryption algorithm negotiation request specifies an encryption algorithm for subsequent communications between the client computer and the server computer;
sending a subsession key to the client computer, wherein the subsession key may be used by the client computer to switch from an established first encryption to a second encryption algorithm for use in conjunction with the selected encryption algorithm to encrypt future communications to the server computer; and
determining the encryption algorithm for future communications between the first computer and the second computer by deriving an encryption algorithm from a key sent with said encryption algorithm negotiation request.