Electronic Conferencing With Layered Encryption for Browser Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing conferencing technologies often exclude users without the installed conferencing application, outdated versions, or incompatible operating systems from participating in video conferencing sessions, while ensuring privacy and security of the conference remains a challenge.
Innovation Solution
Implementing a system that allows web-based access to conferencing sessions using end-to-end encryption and hop-by-hop metadata encryption, enabling devices without the conferencing application to join via browser-based links, while maintaining privacy and security through temporary identifiers and server management of participant devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If end-to-end encryption and hop-by-hop metadata encryption are implemented, then privacy and security of the conference are improved, but device complexity and implementation difficulty increase
Solution Approach 1:
The encryption system is segmented into two distinct layers: end-to-end encryption for content confidentiality and hop-by-hop metadata encryption for transmission security. This segmentation allows each encryption layer to operate independently with its own key management and encryption algorithms, reducing the complexity burden on individual components while maintaining comprehensive security
Solution Approach 2:
The server acts as an intermediary that facilitates hop-by-hop metadata encryption without compromising end-to-end content encryption. The server manages metadata encryption keys and performs intermediate encryption/decryption operations, allowing secure metadata transmission while maintaining the overall encryption architecture without requiring direct peer-to-peer complex key management between all participants
2Ease of operation
If web-based access is enabled for devices without the conferencing application, then accessibility and ease of operation are improved, but privacy and security control become more difficult
Solution Approach 1:
The system implements universal access through web-based links that work across multiple device types and operating systems without requiring the native conferencing application. The same encryption and security protocols are applied uniformly whether the participant joins via mobile app, desktop application, or web browser, ensuring consistent security control while maximizing accessibility
Solution Approach 2:
The conferencing system creates a simplified web-based interface that replicates the core conferencing functionality for participants without the native application. This web copy uses the same end-to-end encryption and security protocols as the full application, allowing broad access while maintaining security through protocol replication rather than creating separate security systems
3Reliability
If temporary identifiers and server management are used for web-based participants, then privacy is improved, but device complexity increases
Solution Approach 1:
The system extracts permanent device identifiers and replaces them with temporary session identifiers for web-based participants. This extraction of identifying information from the participant devices and its replacement with ephemeral tokens preserves privacy by preventing long-term tracking while reducing the complexity of managing permanent credentials across diverse web browsers and devices
Data Source
AI summary
Aspects of the subject technology provide for secure, privacy-preserving access to electronic conferencing. In one or more implementations, participant devices in a conferencing session may be provided with the ability to expel one or more other participant devices from the conferencing session, even when the participant device(s) are not hosts or cohosts of the conferencing session. A participant device may be expellable by another participant device based on a connection mechanism by which the participant device is connected to the conferencing session, and/or based on an amount of time since the participant device joined the conferencing session.