30 results about "Secure messaging" patented technology

A method for secure onboarding to a closed mesh network in which a camera-equipped device scans a QR code embedded in a durable physical carrier (e.g., adhesive bandages, photographs, ID cards) to extract an access credential, configuration profile, or secure URL that automatically configures the device for network access, authenticates the device to the mesh without manual credential entry or transmission of plaintext credentials over insecure channels, and establishes end-to-end encrypted communications between network nodes; the method supports cryptographically random, single-use or time-limited credentials with periodic refresh to prevent replay, encoding of VPN / WireGuard or proprietary configuration profiles, substantially real-time onboarding (e.g., under five seconds), optional multi-factor verification (biometric or PIN), immediate initiation of secure messaging, voice / video or data sessions upon onboarding, audit logging for compliance and revocation based on detected unauthorized activity, and covert or overt embedding of QR codes in environment-resistant carriers for emergency, disaster response, first responder, or covert deployment, with the QR code rendered unreadable or deactivated after successful onboarding to prevent credential reuse.

The present disclosure relates to systems and methods for providing cybersecurity functionality to computer implemented inventions such as Internet of Thing (IoT) systems and object devices, and more specifically, to an improved cybersecurity system, method and capabilities for the protecting IoT and similar devices through non-discriminatory vendor / supplier independent distribution of secure predetermined IoT syndication data to unidentified and non-registered IoT devices, through the use of a passive data distribution technology and out-of-band, system-to-device distribution channel and no peer-to-peer stateless relationship with the receiving device and using Quality of Service (QoS) and enabling the determination as to whether there is any suspicious activity occurring and prohibiting the IoT device from taking any customer-defined action without have a separately provided authentication.

A method of securely communicating a message in a communication system comprises receiving, by a secure messaging platform, a message at a receiving step. The receiving step may include at least one of: confirming that the message is secure, encrypting the message, confirming that the message includes a digital signature, or generating and associating a digital signature with the message and its sender. The method includes transmitting, by the secure messaging platform, the message at a transmission step. The method includes delivering, by the secure messaging platform, the message at a delivery step. The message is maintained in a cryptographically secure state during each step of the method, and each encryption and signing operation is logged to enable end-to-end auditability of the message through the receiving, transmission, and / or delivery steps.

A method for establishing a secure messaging channel between a smartcard and an end device is described. The smartcard contains a Personal Identification Number (PIN), an initial key derivation function, and a communication channel establishment protocol. The end device contains the PIN, the initial key derivation function, and the communication channel establishment protocol. The method comprises the following steps: creating an initial key on the smartcard and on the end device based on the PIN and the initial key derivation function; creating a nonce value, which further comprises the following steps: generating the nonce value on one end device or the end device; encrypting the nonce value with the initial key; and sending the encrypted nonce value to the other end device or the smartcard.and decrypting the encrypted nonce value with the first key, executing the communication channel establishment protocol on the smartcard and on the terminal device based on the generated nonce value to generate a second key on the smartcard and on the terminal device, first deriving a first secure messaging channel key on the smartcard and on the terminal device based on the second key, and second deriving a second secure messaging channel key on the smartcard and on the terminal device based on the second key.

The present invention is a system and method for machine-to-machine communication in a Zero Trust environment. The instant invention describes a platform implementation that disables threat actors and their methods that target workload credentials. The platform is an Automated Moving Target Defense (AMTD) platform that creates sidecars that contain algorithms for creating secure keys from user specified dynamic elements, a machine alias ID (MAID), an encryption library, and an envoy proxy. The sidecars are utilized to control access to, and secure messaging traffic between, entities in a non-trusted environment.

The invention described herein is directed to a secure text messaging and object sharing mobile application connected to a DRM cloud service that provides encryption, digital rights management (DRM) of the text and of the attachments, blockchain transactions, the capability of attaching documents, photos and so forth, the capability of interfacing with a user's contacts application, and that operates in both Android and iOS environments.

The invention provides a user authentication method and system, a medium and equipment, and the method comprises the steps: a service portal and a private network authentication agent pre-install a root certificate based on a standard public key infrastructure, and establish a safety message channel through the mutual verification of digital certificates; a user sends an authentication request to a service portal through a client, the service portal forwards authentication information to an authentication agent through a secure channel, and the authentication agent submits the authentication information to a private network LDAP server after protocol conversion; the LDAP server verifies the identity and returns a result, the result is transmitted back to the service portal through the authentication agent and the secure channel, and the service portal generates a short-term token or a black hole cache and feeds back the short-term token or the black hole cache to the client; and the client accesses the service site by the token. According to the invention, the deployment process is simplified, the existing network architecture and security rules of an enterprise are prevented from being changed, the pressure of a private network LDAP server is reduced, and the security, efficiency and system stability of cross-domain authentication are improved.

Multi-layer ensembles of neural subnetworks are disclosed. Implementations can classify inputs indicating various anomalous sensed conditions into probabilistic anomalies using an anomaly subnetwork. Determined probabilistic anomalies are classified into remedial application triggers invoked to recommend or take actions to remediate, and / or report the anomaly. Implementations can select a report type to submit, or a report recipient, based upon the situation state, e.g., FDA: Field Alert Report (FAR), Biological Product Deviation Report (BPDR), Medwatch, voluntary reporting by healthcare professionals, consumers, and patients (Forms 3500, 3500A, 3500B, Reportable Food Registry, Vaccine Adverse Event Reporting System (VAERS), Investigative Drug / Gene Research Study Adverse Event Reports, Potential Tobacco Product Violations Reporting (Form 3779), USDA: APHIS Center for Veterinary Biologics Reports, Animal and Plant Health Inspection Service: Adverse Event Reporting, FSIS Electronic Consumer Complaints, DEA Tips, Animal Drug Safety Reporting, Consumer Product Safety Commission Reports, State / local reports: Health Department, Board of Pharmacy.

The present disclosure provides an effective solution to an entity or an organization by enabling an end-to-end system or method of delivering secure messages. The system provides a unique way of securely delivering messages or information to a user only after proper user authentication. Hence, security attacks in mobile communication are avoided (such as SIM swapping and the like). Additionally, the system and method of secure messaging is mobile phone operating system (OS) agnostic.

Exemplary embodiments may use a contactless card as a secondary form of authentication in a multi-factor authentication for a secure messaging service. The recipient party of a request to initiate a messaging service session (such as a server computing device) may be programmed to use the phone number of the originating device to look up records regarding an identity of a party and their associated phone number as a primary credential and then may require an authentication credential originating from the contactless card as a secondary credential for the initiating party. In some instances, the credential originating from the contactless card is a onetime password that is valid only for a period of time. The recipient party determines whether the onetime password is valid. If both credentials are valid, a secure messaging session may be initiated with the initiating party.

The invention relates to a method for establishing a secure messaging channel between a smart card and a terminal device. A personal identification number (PIN), a first key derivation function and a communication channel establishment protocol are provided on the smart card. The PIN, the first key derivation function and the communication channel establishment protocol are provided on the terminal device. The method comprises the following steps: creating a first key on the smart card and on the terminal device on the basis of the PIN and the first key derivation function, creating a nonce value, wherein creation further comprises the following steps: generating the nonce value on one of the smart card or the terminal device, encrypting the nonce value using the first key, sending the encrypted nonce value to the other of the terminal device or the smart card, and decrypting the encrypted nonce value using the first key, executing the communication channel establishment protocol on the smart card and on the terminal device on the basis of the created nonce value in order to create a second key on the smart card and on the terminal device, deriving, a first time, a first secure messaging channel key on the smart card and on the terminal device on the basis of the second key and deriving, a second time, a second secure messaging channel key on the smart card and on the terminal device on the basis of the second key.

A system and method securely and selectively provide visibility along a communication path in end-to-end communications, while ensuring security of the transmission, and while further ensuring that unauthorized persons cannot view network packets. A separate parallel channel is used to provide visibility into data in transit to authorized parties, without revealing such data to unauthorized parties. In at least one embodiment, the separate parallel channel is implemented using a secure group messaging platform. In addition, all needed equipment is integrated in the end-to-end connection across layers and protocols into the secure messaging group. Secure, scalable messaging groups can be based on a ratchet tree protocol so as to guarantee forward as well as post-compromise security.

A telecommunications system is configured to prevent Subscriber Identity Module (SIM) swap scams. The system includes multiple network nodes and a database. When a SIM change occurs for a given phone number, a messaging process is triggered between the network nodes that temporarily sets a flag in the database associated with that phone number. While the flag is set in the database, messages for the phone number are not delivered in a normal manner. Instead, the messages are analyzed by the network for the presence of secure information, such as one-time passwords (OTPs). If a message is determined to be secure by the network, then delivery of the message is blocked, thereby preventing a fraudster from performing SIM swap fraud using the message.

On-grid and off-grid secure messaging is described. In one or more implementations, a first electronic device communicates a sender key over a first network to a second electronic device. The sender key enables encryption and decryption of messages communicated between the first electronic device and the second electronic device when the first network is inaccessible by the first electronic device. Responsive to input, at the first electronic device, to communicate a message to the second electronic device when the first network is inaccessible by the first electronic device, the first electronic device encrypts the message using a message key generated based on the sender key and communicates the message encrypted with the message key over a second network to the second electronic device.

Presented herein are techniques for providing a Messaging Layer Security (MLS) gateway that is a verified participant in an MLS group. The MLS gateway joins an MLS group as a first verified member of the MLS group for secure messaging among participants of the MLS group. The MLS gateway transmits first secure content obtained from a first participant to one or more second participants of the MLS group. The first participant is a non-MLS capable participant, and the one or more second participants of the MLS group are verified MLS capable participants. The MLS gateway transmits second secure content obtained from the one or more second participants of the MLS group to the first participant.

Systems and methods are provided for secure messaging with constrained user actions. An example method includes causing presentation of an interactive user interface, the interactive user interface enabling messaging with end users, each end user being associated with a respective phone number. Selection of a particular end user is received via the interaction user interface and the interactive user interface is updated to include a selectable option which triggers transmission of a standardized consent message to a particular phone number associated with the particular end user. User input is received which indicates receipt of externally provided affirmative consent. The interactive user interface is updated, with the updated interactive user interface including an input portion configured to receive arbitrary information for transmission to the particular phone number.

Various embodiments disclose a method including detecting, by a first node in a mesh network while the first node is operating in a normal power mode, an outage event; in response to detecting the outage event, switching to operating the first node and a first memory of the first node in a low power mode, wherein the first memory is capable of switching between operating in the normal power mode and in the low power mode where an amount of power used by the first memory is reduced; and while operating the first node and the first memory in the low power mode: generating, by the first node, a first message; securing, by the first node using a key retrieved from the first memory, the first message; and sending, by the first node, the first message to a second node in the mesh network.

System, method, and software for a cloud printing service. In an embodiment, a cloud print mediator is configured to communicatively couple between a plurality of printers and a cloud printing service. The cloud print mediator is configured to establish a first network connection with the cloud printing service that uses a secure messaging protocol, establish a second network connection with the cloud printing service that uses a secure transfer protocol, receive a print request to print a print job from the cloud printing service over the first network connection, retrieve print data for the print job from the cloud printing service over the second network connection, and submit the print job to a selected printer of the plurality.

Provided are a method and an apparatus for providing a secure message service. The method according to some embodiments includes inquiring a public key of a counterpart user to be invited to a chat room, generating an encryption key related to the chat room using the inquired public key and a private key of a chat room opening user, and transmitting the encryption key to be delivered to a terminal of the counterpart user.

The invention enables verified civic engagement through a secure, scalable platform for polls, surveys, and quizzes. It supports centralized or decentralized hosting, where users verify identity via photo ID, biometrics, or similar methods and receive an Encrypted Access Code for login and wallet access. Three polling boards (Platform-Generated, User-Submitted, Organization), branded as “Vote Your Voice,” and a required Make a Difference Board display ranked content. The Make a Difference Board highlights causes submitted by users, organizations, or the platform. Users earn credits for participation, redeemable for features or mintable as NFTs via the optional Wallet and NFT Module. Organizations access anonymized insights. The required Events Module enables local event discovery with rewards, managed through an organization interface. Live Fact-Checking supports real-time validation. The Alignment Comparison Module compares user responses to official actions or benchmarks. A required Contextual Overlay Engine visualizes data. Optional secure messaging allows private communication between verified users.

An on-boarding technique securely and efficiently provides encrypted wireless credentials needed by wireless devices of a system to join a wireless network. The encrypted wireless credentials are provided via one or more secure messages of a wireless protocol transmitted over a mesh topology. A primary device is initially configured with credential information and automatically distributes the credential information using the secure messaging protocol to subordinate devices on the mesh topology. Illustratively, the primary device is configured with the wireless credentials via an initial physical interaction between the administrator and an application executing on the device to, e. g., enhance security and obviate possibilities of compromising the credentials. Once the physical interaction completes, the primary device becomes a controlling device of the mesh topology that is responsible for onboarding the subordinate devices of the system.

A secure element for securely communicating over a communication network is provided. The secure element comprises a storage unit in which a set of computer readable instructions for mutual authentication of the secure element with an external entity, a static key pair and a receipt are stored. The secure element comprises a control unit configured to execute the set of computer readable instructions which configure the control unit to initiate a secure channel, generate at least one shared secret by performing an elliptic curve key agreement based on the static key pair, generate at least one session key for secure messaging over the secure channel based on the at least one shared secret and shared information, wherein the shared information comprises the receipt, determine a new receipt based on one of the at least one session key, and store the new receipt in the storage unit.

A method of communicating through a less secure messaging system provides an option of masking messages sent from a second party to a first party so that they are unreadable when received by the first party. For some embodiments, it may be that they are visible, but unreadable, other embodiments, not visible. In either case, an authorization may be provided by the first party to make the masked messages readable messages, for many embodiments until a session rule makes the readable message a masked message again.

Various embodiments of a computer-implemented system for universal secure messaging in a clinical setting including a messaging broker are disclosed.

ShotAgent is a blockchain-based platform designed to transform video production and digital content distribution by seamlessly connecting clients with freelance videographers worldwide. The platform features a secure coin-based transaction system and an Al-powered recommendation engine that optimizes freelancer-project matching based on detailed criteria and performance metrics. Integrated collaboration tools facilitate efficient project management through secure messaging, task management, file sharing, and AR / VR-enabled virtual meeting spaces, enhancing communication and coordination. ShotAgent' s specialized marketplace for pre-made video shots allows freelancers to monetize existing content while providing clients with a diverse range of creative assets. Secure smart contracts and blockchain-backed content authentication ensure data integrity and protect intellectual property rights. Additionally, the platform incorporates NFT -based rights management, dynamic content access controls, and advanced analytics for performance tracking. With flexible payment options, multi-language support, and global accessibility, ShotAgent offers a secure, efficient, and collaborative environment for video content creation and distribution across various industries.

A system and method for cryptographic decryption using deterministic collapse resonance based on the Total Wave Modified Schrödinger Equation (TWMSE). An encrypted problem state is encoded as a system wavefunction, while candidate solutions are represented as observer wavefunctions. A collapse field with tunable parameters ensures destructive interference cancels incorrect candidates and constructive resonance deterministically selects the correct solution. Unlike brute-force search or probabilistic quantum measurement, the method achieves decryption in a single engineered collapse. Hardware embodiments include optical photonic systems, neuromorphic processors, and resonant field architectures. Applications extend to RSA, Diffie-Hellman, elliptic curve cryptography, lattice-based post-quantum protocols, blockchain, and secure messaging frameworks. Proof-of-concept demonstrations on small instances, including factorization of $N=15$, illustrate feasibility at toy scale. Scaling to larger cryptosystems is envisioned through adaptive parameter control, resonance calibration, and experimental implementation.

A computer-implemented method for managing the orthopedic treatment process using a mobile application, comprising: Conducting virtual consultations between patients and orthopedic surgeons using real-time communication technologies, • Planning and management of doctor's appointments through an automated appointment scheduling system, ◯ Collection and storage of medical history data, ◯ Real-time tracking of treatment progress, ◯ Ensuring continuous communication through secure News and video broadcasts, ◯ Management and access to electronic patient records via a cloud-based infrastructure.

Embodiments herein relate to systems and methods for secure messaging interoperability between email gateways with different capabilities. A capability indicator within the recipient's public certificate addresses potential incompatibility between email gateways. A sending gateway obtains the recipient's certificate and checks the certificate for the indicator. Based on the check, the sender adaptively selects either an enhanced or a legacy encryption scheme. The message is then encrypted using the selected scheme and transmitted.

A computing platform may receive an event processing request. The computing platform may identify, by inputting first communication parameters of the event processing request into a secure communication model, communication validation information for the event processing request. The computing platform may embed, using one or more tonal bits of an audio communication corresponding to the event processing request, the first communication validation information, wherein embedding the first communication validation information generates a secure event communication. The computing platform may send the secure event communication to a recipient user device, where the recipient user device may be configured to verify the secure event communication based on the first communication validation information.