Procedures Used with Most Security Packages and Protocols

The Security Support Provider Interface (SSPI) model provides a single interface for a client/server transport application using the various security packages available on a computer or network. SSPI allows an application to use a security package without dealing with the underlying security protocols of the package. At the same time, SSPI also allows sophisticated, security-aware applications to take advantage of the advanced capabilities of specific security packages.

Applications initialize SSPI using the following steps to secure a network connection for most security packages:

• Using SecBufferDesc and SecBuffer
• Initializing SSPI
• Establishing a Secure Connection with Authentication
• Ensuring Communication Integrity During Message Exchange
• Ending an SSPI Session