Secure time-to-live

Patent metadata

Field	Value
Publication number	US-11509488-B2
Application number	US-202117306040-A
Country	US
Kind code	B2
Filing date	May 3, 2021
Priority date	Jun 25, 2013
Publication date	Nov 22, 2022
Grant date	Nov 22, 2022

Abstract

Determining whether to allow access to a message is disclosed. A message is received from a sender. The message is associated with a first time-to-live (TTL) value. A determination is made that the first time-to-live value has not been exceeded. The determination is made at least in part by obtaining an external master clock time. In response to the determination, access is allowed to the message.

First claim

What is claimed is:

1. A system, comprising:
an interface that receives a first communication from a first device, wherein the first communication comprises a time-to-live value;
one or more processors; and
a memory coupled to the one or more processors, the memory storing instructions that, as a result of execution by the one or more processors, cause the system to:
determine an expiration time of the first communication by adding the time-to-live value to a first current time;
re-calculate, based on an indication that the first communication was previously opened on a second device at an earlier time, the expiration time to obtain a re-calculated expiration time;
obtain, based on a request of a second communication to access the first communication, a second current time; and
allow access to the first communication, based on a determination that the second current time is less than the re-calculated expiration time.

2. The system of claim 1 , wherein the time-to-live value is configurable by a sender of the first communication.

3. The system of claim 1 , wherein execution of the instructions by the one or more processors to allow access to the first communication further causes the system to decrypt the first communication.

4. The system of claim 1 , wherein execution of the instructions by the one or more processors to allow access to the first communication further causes the system to display the first communication.

5. The system of claim 1 , wherein the first communication further comprises a fixed expiration time.

6. The system of claim 5 , wherein execution of the instructions by the one or more processors further causes the system to deny access to the first communication based on a determination that the second current time is greater than the re-calculated expiration time or the fixed expiration time.

7. The system of claim 6 , wherein execution of the instructions by the one or more processors to deny access to the first communication further causes the system to delete the first communication.

8. The system of claim 6 , wherein execution of the instructions by the one or more processors to deny access to the first communication further causes the system to delete a key needed to decrypt the first communication.

9. The system of claim 1 , wherein the first communication further comprises an embargo time.

10. The system of claim 9 , wherein execution of the instructions by the one or more processors further causes the system to deny, based on a determination that a third current time is less than the embargo time, access to the first communication.

11. The system of claim 1 , wherein the first current time or the second current time is obtained from an external source.

12. A method comprising:
receiving, at a first device, a communication, wherein the communication comprises a time-to-live value;
determining an expiration time of the communication by adding the time-to-live value to a first current time;
re-calculating, based on an indication that the communication was previously opened on a second device at an earlier time, the expiration time to obtain a re-calculated expiration time;
obtaining, based on a request to access the communication, a second current time; and
allowing, based on a determination that the second current time is less than the re-calculated expiration time, access to the communication.

13. The method of claim 12 , wherein to allow access to the communication, the method further comprises decrypting the communication.

14. The method of claim 12 , wherein the communication further comprises a fixed expiration time.

15. The method of claim 14 , further comprising denying access to the communication based on a determination that the second current time is greater than the re-calculated expiration time or the fixed expiration time.

16. The method of claim 15 , wherein denying access to the communication comprises deleting the communication.

17. The method of claim 15 , wherein denying access to the communication comprises deleting a key needed to decrypt the communication.

18. The method of claim 12 , wherein the communication further comprises an embargo time and the method further comprises denying, based on a determination that a third current time is less than the embargo time, access to the communication.

19. A computer program product embodied in a non-transitory tangible computer readable storage medium and comprising computer instructions that, as a result of execution by one or more processors, cause the one or more processors to:
receive a communication, wherein the communication comprises a time-to-live value;
determine an expiration time of the communication by adding the time-to-live value to a first current time;
re-calculate, based on an indication that the communication was previously opened on a second device at an earlier time, the expiration time to obtain a re-calculated expiration time;
obtain, based on a request to access the communication, a second current time; and
allow, based on a determination that the second current time is less than the re-calculated expiration time, access to the communication.

20. The computer program product of claim 19 , further comprising computer instructions that, as a result of execution by the one or more processors, further cause the one or more processors to deny access to the communication based on a determination that the second current time is greater than the re-calculated expiration time or a fixed expiration time, wherein the communication further comprises the fixed expiration time.

Assignees

• Amazon Tech Inc

Inventors

• Statica Robert
• Howell Christopher A
• Coppa Kara Lynn

Classifications

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L9/3234

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• H04L9/3297 Primary

  involving time stamps, e.g. generation of time stamps · CPC title

• H04L63/068

  using time-dependent keys, e.g. periodically changing keys (cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088) · CPC title