Protecting confidential conversations on devices

• US 10,382,620 B1
• Filed: 08/03/2018
• Issued: 08/13/2019
• Est. Priority Date: 08/03/2018
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Allen, Corville O., Kwatra, Shikhar, Freed, Andrew R., Kozhaya, Joseph
• Primary Examiner(s): Arevalo, Joseph
• Application Number:
  US16/054,619
• Time in Patent Office: 375 Days
• Field of Search: 4554563, 455466, 4554121, 455403, 4554561
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04M 1/7243 with interactive means for internal management of messages
• CPC Class Codes: H04M 1/72463 to restrict the functionality of the device
• CPC Class Codes: H04M 2203/6009 Personal information, e.g. profiles or personal directories being only provided to authorised persons
• CPC Class Codes: H04M 2203/609 Secret communication

Abstract

A first mobile device may receive user-input data for generation of an electronic message. The electronic message may be generated as the user-input data is received. The first mobile device may identify sensitive information, within the electronic message. The first mobile device may secure the sensitive information. The first mobile device may disable a screen capture function of the first mobile device. The first mobile device may send the electronic message to a second mobile device. The sending of the electronic message to the second mobile device may include the sending of the secured sensitive information.

Claims

1. A computer-implemented method comprising:

receiving, by a first mobile device, user-input data for generation of an electronic message, wherein the electronic message is generated as the user-input data is received;

identifying sensitive information within the electronic message;

securing the sensitive information, wherein securing the sensitive information comprises;

identifying a location of a secured database of the first mobile device, wherein the secured database is a preprogrammed, cryptographically secure area, and

storing the sensitive information in the secured database;

disabling a screen capture function of the first mobile device;

masking the sensitive information, wherein masking the sensitive information includes;

replacing one or more elements of the sensitive information on the first mobile device with one or more associated characters, and

generating an icon that enables viewing of the sensitive information when selected by a user on a graphical user interface on the first mobile device; and

sending the electronic message to a second mobile device, wherein the electronic message includes the secured sensitive information.

2. The method of claim 1, wherein identifying the sensitive information comprises:

analyzing the user-input data entered on the first mobile device using semantic analysis, syntactic analysis, intent-based analysis, and domain-sensitive message content analysis; and

associating each of the semantic, syntactic, intent-based, and domain-sensitive message contents to respective numerics; and

determining, based on the respective numerics, that a sensitive information threshold has been exceeded.

3. The method of claim 1, further comprising:

determining that the user is selecting the icon;

pulling the sensitive information from the secured database; and

displaying the sensitive information to the user.

4. The method of claim 3, further comprising:

disabling, in response to determining that the user selected the icon, the screen capture function while the sensitive information is viewable on the first mobile device.

5. The method of claim 1, wherein sending the electronic message to the second mobile device comprises:

generating a security indicator, wherein the security indicator includes one or more rules, wherein the one or more rules are the same rules that govern the first mobile device in securing the sensitive information;

attaching, the security indicator to the electronic message; and

maintaining the security of the sensitive information on the second mobile device by the second mobile device executing the rules indicated by the security indicator.

6. A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform a method, the method comprising:

receiving, by a first mobile device, user-input data for generation of an electronic message, wherein the electronic message is generated as the user-input data is received;

identifying sensitive information within the electronic message;

securing the sensitive information, wherein securing the sensitive information comprises;

identifying a location of a secured database of the first mobile device, wherein the secured database is a preprogrammed, cryptographically secure area, and

storing the sensitive information in the secured database;

disabling a screen capture function of the first mobile device;

masking the sensitive information, wherein masking the sensitive information includes;

replacing one or more elements of the sensitive information on the first mobile device with one or more associated characters, and

generating an icon that enables viewing of the sensitive information when selected by a user on a graphical user interface on the first mobile device; and

sending the electronic message to a second mobile device, wherein the electronic message includes the secured sensitive information.

7. The computer program product of claim 6, wherein identifying the sensitive information comprises:

analyzing the user-input data entered on the first mobile device using semantic analysis, syntactic analysis, intent-based analysis, and domain-sensitive message content analysis; and

associating each of the semantic, syntactic, intent-based, and domain-sensitive message contents to respective numerics; and

determining, based on the respective numerics, that a sensitive information threshold has been exceeded.

8. The computer program product of claim 6, further comprising:

determining that the user is selecting the icon;

pulling the sensitive information from the secured database; and

displaying the sensitive information to the user.

9. The computer program product of claim 8, further comprising:

disabling, in response to determining that the user selected the icon, the screen capture function while the sensitive information is viewable on the first mobile device.

10. The computer program product of claim 6, wherein sending the electronic message to the second mobile device comprises:

generating a security indicator, wherein the security indicator includes one or more rules, wherein the one or more rules are the same rules that govern the first mobile device in securing the electronic message;

attaching, the security indicator to the electronic message; and

maintaining the security of the electronic message on the second mobile device by the second mobile device executing the rules indicated by the security indicator.

11. A system comprising:

a memory; and

a processor in communication with the memory, the processor being configured to perform operations comprising;

receiving, by a first mobile device, user-input data for generation of an electronic message, wherein the electronic message is generated as the user-input data is received;

identifying sensitive information within the electronic message;

securing the sensitive information, wherein securing the sensitive information comprises;

identifying a location of a secured database of the first mobile device, wherein the secured database is a preprogrammed, cryptographically secure area, and

storing the sensitive information in the secured database;

disabling a screen capture function of the first mobile device;

masking the sensitive information, wherein masking the sensitive information includes;

replacing one or more elements of the sensitive information on the first mobile device with one or more associated characters, and

generating an icon that enables viewing of the sensitive information when selected by a user on a graphical user interface on the first mobile device; and

sending the electronic message to a second mobile device, wherein the electronic message includes the secured sensitive information.

12. The system of claim 11, wherein identifying the sensitive information comprises:

analyzing the user-input data entered on the first mobile device using semantic analysis, syntactic analysis, intent-based analysis, and domain-sensitive message content analysis; and

associating each of the semantic, syntactic, intent-based, and domain-sensitive message contents to respective numerics; and

determining, based on the respective numerics, that a sensitive information threshold has been exceeded.

13. The system of claim 11, further comprising:

determining that the user is selecting the icon;

pulling the sensitive information from the secured database; and

displaying the sensitive information to the user.

14. The system of claim 13, further comprising:

disabling, in response to determining that the user selected the icon, the screen capture function while the sensitive information is viewable on the first mobile device.

15. The system of claim 11, wherein sending the electronic message to the second mobile device comprises:

generating a security indicator, wherein the security indicator includes one or more rules, wherein the one or more rules are the same rules that govern the first mobile device in securing the sensitive information;

attaching, the security indicator to the electronic message; and

maintaining the security of the sensitive information on the second mobile device by the second mobile device executing the rules indicated by the security indicator.