Secure end-to-end notification

A computer program product for use in a network that includes at least one notification source and at least one notification sink, the network supporting a notification mechanism by which the notification source passes notifications to the notification sink via at least one message transit point, the computer program product for implementing a method for securely passing a notification from the notification source to the notification sink using the notification mechanism while providing end-to-end security despite the existence of the at least one message transit point, the computer program product comprising one or more computer-readable media having stored thereon the following:

• computer-executable instructions for negotiating security information between the notification source and the notification sink out of band from the notification mechanism;
• computer-executable instructions for using the security information to generate a message after the security information has been negotiated, the message including an encrypted form of the notification, as well as clear-text supplemental information that may be used to decrypt the notification using the security information;
• and
• computer-executable instructions for causing the message to be transmitted to the notification sink via the at least one message transit point using the notification mechanism.

In a network that includes at least one notification source and at least one notification sink, the network supporting a notification mechanism by which the notification source passes notifications to the notification sink via at least one message transit point, a method for securely receiving a notification from the notification source using the notification mechanism while providing end-to-end security despite the existence of the at least one message transit point, the method comprising the following:

• an act of negotiating security information between the notification source and the notification sink out of band from the notification mechanism;
• after the security information has been negotiated, an act of receiving a message from the notification source that was received via the at least one message transit point using the notification mechanism;
• and
• an act of using the security information along with clear-text supplemental information included in the message to decrypt an encrypted form of the notification also included in the message.

A computer program product for use in a network that includes at least one notification source and at least one notification sink, the network supporting a notification mechanism by which the notification source passes notifications to the notification sink via at least one message transit point, the computer program product for implementing a method for securely receiving a notification from the notification source using the notification mechanism while providing end-to-end security despite the existence of the at least one message transit point, the computer program product comprising one or more computer-readable media having stored thereon the following:

• computer-executable instructions for negotiating security information between the notification source and the notification sink out of band from the notification mechanism;
• computer-executable instructions for detecting the receipt of a message from the notification source after negotiating the security information, the message being received via the at least one message transit point using the notification mechanism;
• and
• computer-executable instructions for using the security information along with clear-text supplemental information included in the message to decrypt an encrypted form of the notification also included in the message.