Procedures Used with Most Security Packages and Protocols
The Security Support Provider Interface (SSPI) model provides a single interface for a client/server transport application using the various security packages available on a computer or network. SSPI allows an application to use a security package without dealing with the underlying security protocols of the package. At the same time, SSPI also allows sophisticated, security-aware applications to take advantage of the advanced capabilities of specific security packages.
Applications initialize SSPI using the following steps to secure a network connection for most security packages:
- Using SecBufferDesc and SecBuffer
- Initializing SSPI
- Establishing a Secure Connection with Authentication
- Ensuring Communication Integrity During Message Exchange
- Ending an SSPI Session