Secure time-to-live

Patent metadata

Field	Value
Publication number	US-11025440-B2
Application number	US-202016732475-A
Country	US
Kind code	B2
Filing date	Jan 2, 2020
Priority date	Jun 25, 2013
Publication date	Jun 1, 2021
Grant date	Jun 1, 2021

Abstract

Determining whether to allow access to a message is disclosed. A message is received from a sender. The message is associated with a first time-to-live (TTL) value. A determination is made that the first time-to-live value has not been exceeded. The determination is made at least in part by obtaining an external master clock time. In response to the determination, access is allowed to the message.

First claim

What is claimed is:

1. A method comprising:
receiving, by a first device, a communication, wherein the communication comprises a time-to-live value;
determining an expiration time of the communication by adding the time-to-live value to a first current time;
receiving, from a second device, an indication that the communication was previously opened on the second device at an earlier time;
re-calculating, based on the communication being previously opened on the second device at the earlier time, the expiration time;
obtaining, based on a request to access the communication, a second current time;
comparing the second current time to the re-calculated expiration time; and
allowing, based on a determination that the second current time is less than the re-calculated expiration time, access to the communication.

2. The method of claim 1 , wherein the time-to-live value is configurable by a sender of the communication.

3. The method of claim 1 , further comprising:
decrypting the communication when allowing access.

4. The method of claim 1 , wherein allowing access to the communication comprises displaying the communication.

5. The method of claim 1 , further comprising: denying access to the communication based on a determination that the second current time is greater than the re-calculated expiration time.

6. The method of claim 5 , wherein denying access to the communication comprises deleting the communication.

7. The method of claim 5 , wherein denying access to the communication comprises deleting a key needed to decrypt the communication.

8. The method of claim 1 , wherein the communication comprises an embargo time.

9. The method of claim 8 , further comprising:
deny, based on a determination that a third current time is less than the embargo time, access to the communication.

10. A computing device comprising:
an interface configured to: receive a communication, wherein the communication comprises a time-to-live value; and
receive, from a second computing device, an indication that the communication was previously opened on the second computing device at an earlier time;

one or more processors;
memory storing instructions that, when executed by the one or more processors, cause the computing device to:
determine an expiration time of the communication by adding the time-to-live value to a first current time;
re-calculate, based on the communication being previously opened on the second computing device at the earlier time, the expiration time;
obtain, based on a request to access the communication, a second current time;
compare the second current time to the re-calculated expiration time; and
allow, based on a determination that the second current time is less than the re-calculated expiration time, access to the communication.

11. The computing device of claim 10 , wherein the instructions cause the one or more processors to: deny access to the communication based on a determination that the second current time is greater than the re-calculated expiration time.

12. The computing device of claim 11 , wherein denying access to the communication comprises deleting the communication.

13. The computing device of claim 11 , wherein denying access to the communication comprises deleting a key needed to decrypt the communication.

14. The computing device of claim 10 , wherein the first current time is obtained from an external source.

15. A computer program product embodied in a non-transitory tangible computer readable storage medium and comprising computer instructions for:
receiving a communication, wherein the communication comprises a time-to-live value;
determining an expiration time of the communication by adding the time-to-live value to a first current time;
receiving, from a computing device, an indication that the communication was previously opened on the computing device at an earlier time;
re-calculating based on the communication being previously opened on the computing device at the earlier time, the expiration time;
obtaining, based on a request to access the communication, a second current time;
comparing the second current time to the re-calculated expiration time; and
allowing, based on a determination that the second current time is less than the re-calculated expiration time, access to the communication.

16. The computer program product of claim 15 , further comprising computer instructions for: denying access to the communication based on a determination that the second current time is greater than the re-calculated expiration time.

17. The computer program product of claim 16 , wherein denying access to the communication comprises deleting the communication.

18. The computer program product of claim 16 , wherein denying access to the communication comprises deleting a key needed to decrypt the communication.

19. The computer program product of claim 15 , wherein the first current time is obtained from an external source.

20. The computer program product of claim 19 , wherein the second current time is obtained from an external source.

Assignees

• Wickr Inc

Inventors

• Statica Robert
• Howell Christopher A
• Coppa Kara Lynn

Classifications

• H04L51/212

  using filtering or selective blocking · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• H04L9/3297 Primary

  involving time stamps, e.g. generation of time stamps · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title