Instant Messaging Contact Security Partitioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing instant messaging systems lack the ability to dynamically assign security levels to contacts based on their type, leading to inefficient use of resources and potential security risks, as all communications are often treated equally regardless of sensitivity.
Innovation Solution
Implementing a method to send a shared secret using an out-of-band channel to initiate a key exchange for protected instant messaging conversations, allowing organizations to select protection schemes based on IT policies, and storing contact information in specific memory partitions based on contact types.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If across-the-board security measures are applied to all contacts, then security protection is improved, but processing resources and authentication time are increased
Solution Approach 1:
The patent applies different security measures to different contacts based on their classification (personal vs. work contacts). Work contacts receive enhanced security protection including out-of-band verification and encrypted messaging, while personal contacts use standard messaging without additional security overhead. This selective application of security measures resolves the contradiction by providing high security where needed while conserving processing resources for less sensitive communications.
2Reliability
If across-the-board security measures are applied to all contacts, then security protection is improved, but authentication time is increased
Solution Approach 1:
The system implements differentiated authentication processes based on contact type. Work contacts undergo enhanced authentication including out-of-band verification channels, while personal contacts experience fast authentication. This resolves the time-security contradiction by applying rigorous authentication only to contacts requiring it, maintaining security where necessary while minimizing authentication time for routine personal communications.
3Device complexity
If contact information is stored in unified memory, then device simplicity is maintained, but security risks increase for sensitive information
Solution Approach 1:
The patent segments contact information storage into separate memory partitions: work contacts are stored in a work partition with enhanced security controls, while personal contacts are stored in a personal partition. This segmentation allows the device to maintain relative simplicity while implementing targeted security measures for sensitive work information, resolving the contradiction between device simplicity and security risk mitigation.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
A method, communication device and computer program product communicate between the communication device and a second communication device using an instant messaging application. The first device receives contact information identifying the second communication device and determines a contact type for the second communication device from the contact information. If the contact type is a first contact type, the contact information is stored in a first partition of a memory of the communication device. If the contact type is a second contact type, the contact information is stored in a second partition of the memory. The partitions may employ different encryption schemes or one partition may be is unencrypted. A third party has access and control over the second partition. The device communicates with the second communication device using a security policy associated with the contact type.