Online Meeting Encryption Switching Without Spoofed Disable Messages

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing end-to-end encryption systems in online meetings are vulnerable to unauthorized users spoofing messages to dynamically enable or disable encryption, compromising security and confidentiality.

Innovation Solution

Implementing encrypted messages that can only be decrypted on end-user devices to coordinate the enabling and disabling of end-to-end encryption sessions, eliminating reliance on third-party servers to prevent spoofing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If end-to-end encryption is enabled in online meetings, then security and confidentiality are improved, but unauthorized users can spoof messages to dynamically disable encryption

Engineering Contradiction:

Improveencryption securityVSAvoidspoofing attacks

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a key orchestration server as an intermediary that mediates encryption key management and session coordination. This server enables encrypted communication without being the target of spoofing attacks, as it handles key distribution and session state management separately from the encrypted message channels that attackers might compromise.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary establishment of encryption sessions and key exchange before actual meeting content is transmitted. By pre-configuring secure channels and verifying participant identities before the meeting starts, the system prevents attackers from injecting spoofed messages during the session, as the encryption framework is already validated and in place.

Inventive Principle:

Principle #10Preliminary action

2Adaptability or versatility

If end-to-end encryption is dynamically disabled to support legacy devices, then device compatibility is improved, but security vulnerabilities increase

Engineering Contradiction:

Improvedevice compatibilityVSAvoidencryption security

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments the meeting system into encrypted and unencrypted zones. Legacy devices without encryption capabilities are isolated to specific functionality or separate communication channels, while the main meeting content remains encrypted. This allows legacy device support without compromising the security of the primary encrypted session.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The key orchestration server acts as an intermediary that translates between encrypted and unencrypted communication protocols. It receives encrypted messages from secure devices, processes them, and generates appropriate responses for legacy devices, enabling mixed-device meetings while maintaining security boundaries.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS20250379857A1Enabling and disabling end-to-end encryption in multiparty conference

Publication Date: 2025.12.11 RINGCENTRAL INC

AI summary

A computer-implemented method for dynamically disabling an end-to-end encryption session within an online meeting session is provided. The method comprises engaging in an online meeting session in which an end-to-end encryption session is enabled. The method further comprises sending, to a key orchestration server, a first encrypted message in which the contents of the first encrypted message are instructions to disable the end-to-end encryption session. The method further comprises receiving, from the key orchestration server, a second encrypted message that indicates that a participant has initiated disabling of the end-to-end encryption session. In response to receiving the second encrypted message disabling the end-to-end encryption session while maintaining the online meeting session.