Network communication with client-forced authentication
AssigneeMicrosoft Corporation
InventorWeihai Chen
Life of this patent
Estimating the term…
Abstract
A client-forced authentication mechanism for network communication enables a client to choose to force the establishment of an authenticated connection with a server that supports both authenticated and non-authenticated connections, while allowing the client to communicate with older servers that do not support client-forced authentication.
Claims14
A method for establishing an authenticated connection between a client and a server under the Hypertext Transfer Protocol (HTTP), comprising:
- preparing a HTTP connection request packet containing authentication request data for requesting establishment of an authenticated network connection under HTTP, the authentication request data formatted for prompting a server recognizing said data to respond with a first predefined message and for causing a server not recognizing said data to respond with a second pre-defined message;
- sending the HTTP connection request packet to the server;
- receiving a HTTP response packet containing a response message from the server responding to the HTTP connection request packet;
- if the HTTP response message includes the first pre-defined message, transmitting credential data of the client in subsequent HTTP packets to the server for authentication;
- if the HTTP response message includes the second pre-defined message, transmitting subsequent communication to the server over a non-authenticated HTTP connection.
A system for establishing an authenticated connection between a client and a server under the Hypertext Transfer Protocol (HTTP), comprising:
- means for preparing an HTTP connection request packet containing authentication request data for requesting establishment of an authenticated network connection under HTTP, the authentication request data formatted for prompting a server recognizing said data to respond with a first predefined message and for causing a server not recognizing said data to respond with a second pre-defined message;
- means for sending the HTTP connection request packet to the server;
- means for receiving a HTTP response packet containing a response message from the server responding to the HTTP connection request packet;
- means for transmitting credential data of the client in subsequent HTTP packets to the server for authentication if the HTTP response message includes the first pre-defined message;
- and
- means for transmitting subsequent communication to the server over a non-authenticated HTTP connection if the HTTP response message includes the second pre-defined message.
Dependencies are inferred from the claim text.