Secure capability negotiation between a client and server

A method for establishing an authenticated session between a client computing device and a remote computing device, the method comprising;

• establishing a connection with the remote computing device;
• sending a negotiate request to the remote computing device, wherein the negotiate request includes a first set of information;
• receiving a negotiate response from the remote computing device, wherein the negotiate response includes a second set of information associated with the first set of information;
• sending a setup request to the remote computing device;
• receiving a setup response from the remote computing device;
• sending a signed validation request to the remote computing device, wherein the signed validation request includes a third set of information;
• receiving a signed validation response from the remote computing device, wherein the signed validation response includes a fourth set of information;
• comparing the fourth set of information to the second set of information;
• and
• based on the comparison of the fourth set of information to the second set of information, establishing the authenticated session with the remote computing device.

A remote computing system for establishing an authenticated session with a client computing system, the remote computing system comprising:

• at least one processor;
• a memory, operatively connected to the at least one processor and including instructions that, when executed by the at least one processor, cause the at least one processor to perform a method, the method comprising:
• receiving a negotiate request from the client computing system over a connection, wherein the negotiate request includes a first set of information;
• sending a negotiate response to the client computing system, wherein the negotiate response includes a second set of information associated with the first set of information;
• receiving a setup request from the client computing system;
• sending a setup response to the client computing system;
• receiving a signed validation request from the client computing system, wherein the signed validation request includes a third set of information;
• comparing the third set of information to the first set of information;
• and
• based on the comparison of the third set of information to the first set of information, sending a signed validation response to the client computing system.

A client computing system for establishing an authenticated session between the client computing system and a remote computing system, the client computing system comprising;

• at least one processor;
• a memory, operatively connected to the at least one processor and including instructions that, when executed by the at least one processor, cause the at least one processor to perform a method, the method comprising:
• establishing a connection with the remote computing system;
• sending a negotiate request to the remote computing system, wherein the negotiate request includes a first set of information;
• receiving a negotiate response from the remote computing system, wherein the negotiate response includes a second set of information associated with the first set of information;
• sending a setup request to the remote computing system;
• receiving a setup response from the remote computing system;
• sending a signed validation request to the remote computing system, wherein the signed validation request includes a third set of information;
• receiving a signed validation response from the remote computing system, wherein the signed validation response includes a fourth set of information;
• comparing the fourth set of information to the second set of information;
• and
• based on the comparison of the fourth set of information to the second set of information, establishing the authenticated session with the remote computing system.