Encrypted Messaging Device Verification via Computer-Perceptible Code
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing messaging systems face challenges in securely authorizing new devices to send and receive encrypted messages on behalf of a user without sharing private encryption keys.
Innovation Solution
A system where a secondary device generates a computer-perceptible code encoding encryption credentials, which is read by a primary device to verify and add the secondary device to an approved device list, using cryptographic keys and a pairing key to establish secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a secondary device is added to send and receive encrypted messages, then device versatility and user convenience are improved, but the risk of unauthorized access and security breaches increases
Solution Approach 1:
The system performs preliminary verification actions before allowing message transmission. The secondary device must first present its credentials through the computer-perceptible code, which the primary device verifies against the server-authenticated device list before granting access to encrypted messaging capabilities.
Solution Approach 2:
The server acts as an intermediary that mediates between the primary and secondary devices. It authenticates the secondary device's credentials and maintains the authorized device list, preventing direct unauthorized access while enabling legitimate multi-device usage.
2Reliability
If encryption credentials are shared between devices, then secure communication is established, but the risk of key compromise and unauthorized decryption increases
Solution Approach 1:
The encryption credentials are segmented into device-specific authentication credentials rather than sharing a single private key. Each device has its own cryptographic identity that the server verifies, allowing secure communication without exposing the primary device's private key to secondary devices.
Solution Approach 2:
Instead of sharing the original private key, the system creates cryptographic copies or derivatives specific to each device. The secondary device receives authenticated credentials that enable secure communication without being the original private key, reducing compromise risk.
3Reliability
If manual verification of each device is required, then security is maintained, but the complexity of device management and user operation increases
Solution Approach 1:
The system enables self-service device verification through the computer-perceptible code mechanism. The secondary device automatically presents its credentials, and the primary device automatically verifies them through the established protocol, eliminating the need for manual administrative intervention while maintaining security.
Solution Approach 2:
The verification process changes from manual parameter checking to automated cryptographic parameter verification. The system transforms the verification task from human-operated security checks to machine-executed cryptographic validation, reducing operational complexity while maintaining reliability.
Data Source
AI summary
This application describes methods, mediums, and systems for verifying a device for use in a messaging system. Using the device verification procedures described, a messaging system can securely authorize new devices to send and receive encrypted messages on behalf of a user, preferably without the need to share a private encryption key between the users' different devices. The application describes several techniques that can be used to provide such a system, including distributing a computer-perceptible code that encodes encryption information between a secondary device and a primary device. This allows the information to be distributed without intervention by a server. Other techniques provide unique ways to build and reverify authorized device lists, distribute encryption keys in chat channels, ensure that lists of authorized devices are distributed in the correct order and remain valid for an appropriate amount of time, add new devices to an ongoing or new conversation, and more.