Privacy Control for Message-Based Communications

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data security methods fail to ensure that sensitive messages are only readable by intended recipients and cannot be forwarded or retained by others, lacking control over message dissemination and expiration.

Innovation Solution

A method and system that encrypts messages using a unique AES key, prevents forwarding by disabling copy actions, and allows for message expiration and recall, using a private messaging application that communicates with a messaging privacy service to manage encryption keys and control access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If messages are sent using conventional methods, then communication efficiency is maintained, but message confidentiality and control over dissemination are lost

Engineering Contradiction:

Improvemessage confidentialityVSAvoidmessaging system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

A privacy service server acts as an intermediary between senders and recipients. The server stores encryption keys and manages message lifecycle without exposing the actual message content. This intermediary approach maintains confidentiality while keeping the client applications relatively simple.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The messaging system is segmented into separate components: client applications for sending/receiving messages, a privacy service server for key management and control, and existing email infrastructure for message transport. This segmentation allows each component to specialize in specific functions, improving overall reliability without overwhelming complexity.

Inventive Principle:

Principle #1Segmentation

2Ease of operation

If messages can be freely forwarded and retained, then ease of sharing is improved, but control over message dissemination is lost

Engineering Contradiction:

Improvemessage sharing easeVSAvoidcontrol over dissemination

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The system implements feedback mechanisms where recipients must authenticate with the privacy service server to access messages. The server tracks and controls all access events, providing continuous feedback to the sender about who has accessed the message and when. This maintains control while allowing legitimate sharing.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

Message access control is dynamic rather than static. The privacy service server can dynamically grant or revoke access rights, set expiration times, and control forwarding permissions based on ongoing policies. This dynamic control allows flexible sharing while maintaining reliability.

Inventive Principle:

Principle #15Dynamics

3Loss of information

If messages are permanently stored, then information availability is maintained, but security risks from unauthorized access increase

Engineering Contradiction:

Improveinformation availabilityVSAvoidunauthorized access risk

Core Design Contradiction:

Loss of informationVSObject-affected harmful factors

Solution Approach 1:

Messages are designed with finite lifespans rather than permanent storage. The privacy service server can automatically delete messages after expiration times or after certain conditions are met. This disposable approach reduces long-term security risks while maintaining information availability during the intended lifecycle.

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Solution Approach 2:

The system changes the temporal parameter of message storage from permanent to temporary. Messages have configurable expiration times and can be automatically destroyed after a certain period or after being accessed a certain number of times. This parameter change reduces unauthorized access risk while maintaining availability during the active period.

Inventive Principle:

Principle #35Parameter changes

4Speed

If encryption keys are stored locally, then access speed is improved, but security from key compromise is reduced

Engineering Contradiction:

Improvemessage access speedVSAvoidkey security

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The privacy service server acts as an intermediary key management system. Instead of storing keys locally (which compromises security) or requiring online access (which reduces speed), the server provides authenticated key delivery. The client application caches keys temporarily for fast access, but the server maintains ultimate control and can revoke access, balancing speed and security.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11444897B2System and method for providing privacy control to message based communications

Publication Date: 2022.09.13 CRYPTOMILL

AI summary

A system and method for controlling access to a message after communication. A sender sends an encrypted message to a recipient. The sender also sends an encryption key and the identity of the recipient to a services component. The recipient authenticates its access rights with the services component to obtain the encryption key. The key is held for a period of time for the recipient to access the encrypted message. The recipient may re-authenticate with the services component to again obtain the key to subsequently access the message. The sender may revoke or reinstate the receiver's access to the message by updating the service component.