Device Independent Secure Messaging via Account-Device Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure messaging systems are limited to device-to-device interactions, requiring re-establishment of sessions and key exchanges when users switch devices, which leads to delays and unauthorized access risks.
Innovation Solution
The implementation of device-independent secure messaging using cryptographic techniques that allow end-to-end or account-to-account security, enabling users to send and receive encrypted messages without being tethered to specific devices, and allowing seamless switching between devices without compromising security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If device-to-device session support is used for encryption, then security is maintained during active sessions, but users are limited to specified computing devices and must re-establish sessions when switching devices
Solution Approach 1:
The system segments the encryption session into account-level identity and device-level keys. The server stores encrypted message content linked to the recipient's account identifier, while device-specific decryption keys are maintained separately. This segmentation allows the same account to access messages across multiple devices without re-establishing the entire encryption session.
Solution Approach 2:
The server acts as an intermediary that decouples the encryption session from specific devices. It receives encrypted messages from senders, stores them associated with recipient account identifiers, and enables decryption on any device where the recipient is authenticated. This intermediary approach allows device independence while maintaining security.
2Reliability
If device-to-device sessions are used, then encryption is established between fixed devices, but delays occur and unauthorized access risks arise when users switch devices
Solution Approach 1:
The system performs preliminary actions by pre-storing account identifiers and encryption metadata on the server before device switching occurs. When a user accesses the system on a new device, the server can immediately retrieve the appropriate encrypted content using the account identifier without requiring re-establishment of the encryption session, eliminating delays.
Solution Approach 2:
The system implements feedback mechanisms where the server monitors device authentication and automatically manages key retrieval and message delivery. When a user authenticates on a new device, the server feedbacks with the appropriate decryption keys and message content, preventing unauthorized access while eliminating manual re-establishment steps.
Data Source
AI summary
Systems, devices, media, and methods are presented for device independent secure messaging. The systems and methods generate an encrypted message by encrypting message content, designated for a specified recipient, with an encryption key. The systems and methods select a set of recipient keys, associated with the specified recipient, from a plurality of member keys. For each recipient key, the systems and methods encrypt the encryption key to generate a set of encrypted keys and transmit the encrypted message and an encrypted key of the set of encrypted keys to one or more client devices associated with the specified recipient. The systems and methods then receive an acknowledgement indicating a termination status of the encrypted message.