Uniformly representing and transferring security assertion and security response information

In a distributed system including a requesting message processor that is communicatively coupled to a validating message processor so as to be able to communicate by transferring electronic messages via a common protocol, a method for determining if a client message processor is a trusted client such that a need to have multiple protocols stacks to transfer security assertions and security responses is reduced at least at the requesting message processor, the method comprising:

• an act of identifying authentication data of a first format that is to be transferred to the validating message processor;
• an act of maintaining a security token processing interface for receiving multiple differently formatted portions of authentication data that have been uniformly encapsulated for transfer using the common protocol and for receiving corresponding multiple differently formatted portions of authentication result data that have been uniformly encapsulated for transfer using the common protocol so as to eliminate the need to maintain separate protocol stack for each of the multiple differently formatted portions of authentication data and corresponding multiple differently formatted portions of authentication result data;
• an act of uniformly encapsulating a portion of the authentication data within a client security token such that the client security token can be processed by a corresponding validating token processing interface at the validating message processor, the uniform encapsulation allowing the portion of authentication data to be sent via the common protocol, the common protocol being readable by the validating message processor, and thereby allowing the client message processor to release any protocol stacks reserved for processing a reply message indicating whether the client message processor is a trusted client;
• an act of exchanging uniformly encapsulated security tokens, including the client security token and a response security token, via an abstract interface, with the validating message processor, the response security token uniformly encapsulating a portion of authentication result data of a second format which is different from the first format, wherein the second format is selected based on portion of authentication data;
• and
• an act of processing the response security token to determine if the portion of authentication result data indicates that the client message processor is a trusted client.

A computer program product for use in a distributed system including a requesting message processor that is communicatively coupled to a validating message processor so as to be able to communicate by transferring electronic messages via a common protocol, the computer program product for implementing a method for determining if a client message processor is a trusted client such that a need to have multiple protocols stacks to transfer security assertions and security responses is reduced at least at the requesting message processor, the computer program product comprising one or more physical storage media having stored thereon computer-executable instructions that, when executed by a processor, cause the distributed system to perform the method, including the following:

• identify authentication data of a first format that is to be transferred to the validating message processor;
• maintain a security token processing interface for receiving multiple differently formatted portions of authentication data that have been uniformly encapsulated for transfer using the common protocol and for receiving corresponding multiple differently formatted portions of authentication result data that have been uniformly encapsulated for transfer using the common protocol so as to eliminate the need to maintain separate protocol stack for each of the multiple differently formatted portions of authentication data and corresponding multiple differently formatted portions of authentication result data;
• uniformly encapsulate a portion of the authentication data within a client security token such that the client security token can be processed by a corresponding validating token processing interface at the validating message processor, the uniform encapsulation allowing the portion of authentication data to be sent via the common protocol, the common protocol being readable by the validating message processor, and thereby allowing the client message processor to release any protocol stacks reserved for processing a reply message indicating whether the client message processor is a trusted client;
• send the client security token to the validating message processor by the requesting message processor;
• receive a response security token from the validating message processor by the requesting message processor via the common protocol, the response security token uniformly encapsulating a portion of authentication result data of a second format which is different from the first format, wherein the second format is selected based on the portion of authentication data;
• and
• process the response security token to determine if the portion of authentication result data indicates that the client message processor is a trusted client.