Instant messaging apparatus and method with instant messaging secure policy certificates

• US 20030204722A1
• Filed: 04/26/2002
• Published: 10/30/2003
• Est. Priority Date: 04/26/2002
• Status: Abandoned Application

• Current Assignee: Cygnacom Solutions, Inc. (Entrust Corp.), Entrust Technologies Limited
• Original Assignee: Cygnacom Solutions, Inc. (Entrust Corp.)
• Inventors: Schoen, Isadore, Boberski, Michael
• Application Number:
  US10/133,203
• Publication Number:
  US 20030204722A1
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 63/064 Hierarchical key distribution, e.g. by multi-tier trusted parties
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Briefly, a method and apparatus for facilitating instant messaging generates (e.g. issues) an instant messaging public key cryptography policy certificate containing selected instant messaging public key cryptography policy control information. An instant messaging device obtains the instant messaging public key cryptography policy certificate through the use of a local instant messaging secure public key infrastructure proxy. Based on instant messaging policy control data in the instant messaging public key cryptography policy certificate, operations of the local instant messaging secure PKI proxy are controlled for outgoing and incoming instant messages. Hence, among other advantages, central enforcement of security policies for instant messaging users is provided.

Claims

1. A method for facilitating instant messaging comprising:

receiving, by a local instant messaging secure public key infrastructure (PKI) proxy, an instant messaging public key cryptography policy certificate for an instant message subscriber; and

controlling operations of the local instant messaging secure PKI proxy for an outgoing or incoming instant message in response to instant messaging policy control data in the IM public key cryptography policy certificate.

2. The method of claim 1 including:

verifying a digital signature of the instant messaging public key cryptography policy certificate to determine if it was originated by a trusted instant messaging PKI policy certificate issuer;

if properly verified, using the policy control data in the IM public key cryptography policy certificate to control at least the local instant messaging secure PKI proxy.

3. The method of claim 1 including the step of storing the instant messaging public key cryptography policy certificate in a repository for retrieval by the local instant messaging secure public key infrastructure proxy.

4. The method of claim 1 wherein the instant messaging policy control data includes security and non-security related operations data representing a defined operation state for a plurality of security related operations and non-security related operations.

5. A method for facilitating instant messaging comprising:

providing selectability of instant messaging public key cryptography policy control information; and

generating an instant messaging public key cryptography policy certificate containing selected instant messaging public key cryptography policy control information.

6. The method of claim 5 including the step of storing the instant messaging public key cryptography policy certificate in a repository for retrieval by a local instant messaging secure public key infrastructure proxy operating on an instant messaging device.

7. The method of claim 5 including at least one of:

publishing the instant messaging public key cryptography policy certificate to a public key certificate repository and broadcasting the instant messaging public key cryptography policy certificate to online instant messaging devices.

8. A certificate issuing unit comprising:

at least one processor; and

memory, operatively coupled to the at least one processor, that contains instructions that cause the one or more processors to;

provide selectability of instant messaging public key cryptography policy control information; and

generate an instant messaging public key cryptography policy certificate containing selected instant messaging public key cryptography policy control information including digitally signing selected instant messaging public key cryptography policy control information.

9. The certificate issuing unit of claim 8 wherein the memory includes instructions that cause the one or more processors to:

provide selectablity of security and non-security related operations data representing a defined operation state for a plurality of security and non-security related operations.

10. An instant messaging device comprising:

at least one processor; and

memory, operatively coupled to the at least one processor, containing instructions that when executed by one or more processors, causes the one or more processors to;

receive, by a local instant messaging secure public key infrastructure (PKI) proxy, an instant messaging public key cryptography policy certificate for an instant messaging subscriber; and

control operations of the local instant messaging secure PKI proxy for an outgoing or incoming instant message in response to instant messaging policy control data in the IM public key cryptography policy certificate.

11. The instant messaging device of claim 10 wherein the memory includes instructions that cause the one or more processors to:

verify a digital signature of the instant messaging public key cryptography policy certificate to determine if it was originated by a trusted instant messaging PKI policy certificate issuer; and

if properly verified, use the policy control data in the IM public key cryptography policy certificate to control at least the local instant messaging secure PKI proxy.

12. A storage medium containing executable instructions that when executed by one or more processing devices, cause the one or more processing devices to:

receive, by a local instant messaging secure public key infrastructure (PKI) proxy, an instant messaging public key cryptography policy certificate for an instant messaging subscriber; and

control operations of the local instant messaging secure PKI proxy for an outgoing or incoming instant message in response to instant messaging policy control data in the IM public key cryptography policy certificate.

13. The storage medium of claim 12 wherein the memory contains executable instructions that when executed by one or more processing devices, cause the one or more processing devices to:

verify a digital signature of the instant messaging public key cryptography policy certificate to determine if it was originated by a trusted instant messaging PKI policy certificate issuer; and

if properly verified, use the policy control data in the IM public key cryptography policy certificate to control at least the local instant messaging secure PKI proxy.

14. The storage medium of claim 13 wherein the memory contains executable instructions that when executed by one or more processing devices, cause the one or more processing devices to:

provide selectability of instant messaging public key cryptography policy control information; and

generate an instant messaging public key cryptography policy certificate containing selected instant messaging public key cryptography policy control information including digitally signing selected instant messaging public key cryptography policy control information.