Federated Messaging

Patent metadata

Field	Value
Publication number	US-2019068614-A1
Application number	US-201715689239-A
Country	US
Kind code	A1
Filing date	Aug 29, 2017
Priority date	Aug 29, 2017
Publication date	Feb 28, 2019
Grant date	—

Abstract

The present disclosure describes a method, system, and non-transitory computer readable medium that includes instructions that permit users of different secure communication networks to exchange secure communications. A secure communication platform includes a user database that allows users from different secure communication networks to access keys for recipients outside of their network. Additionally, the secure communication platform provides a high degree of trust regarding the sender's identity, allowing the receiving network to trust the sender.

First claim

What is claimed is:

1 . A method for federated messaging, the method comprising:
receiving, at a first server from a first device belonging to a first secure communication network, a first communication for a second device belonging to a second secure communication network, wherein the first communication includes a first security group identifier associated with the first device and a second security group identifier associated with the second device; determining, by the first server, whether a first set of permissions associated with the first security group identifier permit the first device to communicate with the second secure communication network; and determining, by the first server, whether a second set of permissions associated with the second security group identifier permit the second device to communicate with the first secure communication network; and providing, by the first server, the first communication to the second device on the second secure communication network when the first device and the second device are permitted to communicate.

2 . The method of claim 1 , comprising:
discarding, by the first server, the first communication when at least one of the first set of permissions do not permit the first device to communicate with the second secure communication network and the second set of permissions do not permit the second device to communicate with the first secure communication network.

3 . The method of claim 1 , wherein the first communication includes encrypted routing data and an encrypted payload.

4 . The method of claim 3 , comprising:
decrypting, by the first server, the encrypted routing data using a first key to obtain the first security group identifier and the second security group identifier.

5 . The method of claim 4 , wherein the first key is a private key belonging to the first server.

6 . The method of claim 1 , comprising:
determining, by the first server, whether the first secure communication network and the second secure communication network are the same network; and providing, by the first server, the first communication to the second device when the first secure communication network is the same network as the second secure communication network.

7 . A system for federated messaging, the system comprising:
an interface configured to receive a first communication from a first device belonging to a first secure communication network for a second device belonging to a second secure communication network, wherein the first communication includes a first security group identifier associated with the first device and a second security group identifier associated with the second device; a processor configured to determine whether a first set of permissions associated with the first security group identifier permit the first device to communicate with the second secure communication network, determine whether a second set of permissions associated with the second security group identifier permit the second device to communicate with the first secure communication network, and provide the first communication to the second device on the second secure communication network when the first device and the second device are permitted to communicate; and a memory coupled to the processor and configured to store the first set of permissions and second set of permissions and to provide the processor with instructions for determining whether the first device and the second device are permitted to communicate.

8 . The system of claim 7 , wherein the processor is further configured to discard the first communication when at least one of the first set of permissions do not permit the first device to communicate with the second secure communication network and the second set of permissions do not permit the second device to communicate with the first secure communication network.

9 . The system of claim 7 , wherein the first communication includes encrypted routing data and an encrypted payload.

10 . The system of claim 9 , wherein the processor is configured to decrypt the encrypted routing data using a first key to obtain the first security group identifier and the second security group identifier.

11 . The system of claim 10 , wherein the first key is a private key belonging to the first server.

12 . The system of claim 7 , wherein the processor is further configured to determine whether the first secure communication network and the second secure communication network are the same network and provide the first communication to the second device when the first secure communication network is the same network as the second secure communication network.

13 . A non-transitory computer-readable medium comprising instructions that when, executed by at least one processor, perform the steps of:
receiving a first communication from a first device belonging to a first secure communication network for a second device belonging to a second secure communication network, wherein the first communication includes a first security group identifier associated with the first device and a second security group identifier associated with the second device; determining whether a first set of permissions associated with the first security group identifier permit the first device to communicate with the second secure communication network; and determining whether a second set of permissions associated with the second security group identifier permit the second device to communicate with the first secure communication network; and providing the first communication to the second device on the second secure communication network when the first device and the second device are permitted to communicate.

14 . The non-transitory computer-readable medium of claim 13 , comprising instructions for:
discarding the first communication when at least one of the first set of permissions do not permit the first device to communicate with the second secure communication network and the second set of permissions do not permit the second device to communicate with the first secure communication network.

15 . The non-transitory computer-readable medium of claim 13 , wherein the first communication includes encrypted routing data and an encrypted payload.

16 . The non-transitory computer-readable medium of claim 15 , comprising instructions for:
decrypting the encrypted routing data using a first key to obtain the first security group identifier and the second security group identifier.

17 . The non-transitory computer-readable medium of claim 16 , wherein the first key is a private key belonging to the first server.

18 . The non-transitory computer-readable medium of claim 13 , comprising instructions for:
determining whether the first secure communication network and the second secure communication network are the same network; and providing the first communication to the second device when the first secure communication network is the same network as the second secure communication network.

Assignees

• Wickr Inc

Inventors

• Bhatnagar Arjun
• Howell Christopher

Classifications

• H04W12/02

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title

• H04L2463/062

  applying encryption of the keys · CPC title

• G06Q10/107 Primary

  Computer-aided management of electronic mailing [e-mailing] · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L63/062

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title