EFFICIENT SECURE INSTANT MESSAGING

• US 20150350247A1
• Filed: 09/04/2014
• Published: 12/03/2015
• Est. Priority Date: 05/30/2014
• Status: Abandoned Application

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Adler, Mitchell D., Sauerwald, Conrad, Brouwer, Michael L.H.
• Application Number:
  US14/477,564
• Publication Number:
  US 20150350247A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A method and apparatus of a device that enables a user to participate in a secure instant messaging session by starting with a low security connection before switching to a high security connection is described. The device concurrently establishes a low security connection and a high security connection with a remote participant of the secure instant messaging session. The device sends a first message to the remote participant through the low security connection while the high security connection is being established. The device further determines whether the high security connection is established. If the high security connection is established, the device can send a second message to the remote participant through the high security connection. If the high security connection is not yet established, the device can send the second message to the remote participant through the low security connection.

Claims

1. A computer-implemented method for participating in a secure instant messaging session at a data processing system, the method comprising:

concurrently establishing a low security connection and a high security connection with a remote participant of the secure instant messaging session;

sending a first message to the remote participant through the low security connection while the high security connection is being established;

determining whether the high security connection is established; and

sending a second message to the remote participant through the high security connection when the high security connection is established.

2. The method of claim 1 further comprising sending the second message to the remote participant through the low security connection when the high security connection is not yet established.

3. The method of claim 1, wherein the first and second messages are received from a local participant of the secure instant messaging session using the data processing system.

4. The method of claim 1, wherein the high security connection uses Off-the-Record Messaging (OTR) protocol or Transport Layer Security (TLS) protocol.

5. The method of claim 4, wherein the low security connection uses a cryptographic protocol that does not provide perfect forward secrecy or malleable encryption.

6. The method of claim 1, wherein the high security connection uses a cryptographic protocol that provides at least one of perfect forward secrecy or malleable encryption.

7. A computer-implemented method for participating in a secure instant messaging session at a data processing system, the method comprising:

receiving requests from a remote participant of the secure instant messaging session to establish a high security connection and a low security connection;

concurrently establishing the high security connection and the low security connection with the remote participant;

receiving a first message from the remote participant through the low security connection while the high security connection is being established;

determining whether the high security connection is established; and

sending a second message to the remote participant through the high security connection when the high security connection is established.

8. The method of claim 7 further comprising sending the second message to the remote participant through the low security connection when the high security connection is not yet established.

9. The method of claim 7, wherein the first and second messages are received from a local participant of the secure instant messaging session using the data processing system.

10. The method of claim 7, wherein the high security connection uses Off-the-Record Messaging (OTR) protocol or Transport Layer Security (TLS) protocol.

11. The method of claim 10, wherein the low security connection uses a cryptographic protocol that does not provide perfect forward secrecy or malleable encryption.

12. The method of claim 7, wherein the high security connection uses a cryptographic protocol that provides at least one of perfect forward secrecy or malleable encryption.

13. A computer-implemented method for participating in a secure instant messaging session at a data processing system, the method comprising:

concurrently establishing a plurality of channels with a remote participant of the secure instant messaging session, wherein each channel provides a different set of functionalities;

selecting one of the plurality of channels based on a set of criteria; and

sending a message to the remote participant through the selected channel.

14. The method of claim 13, wherein the set of criteria comprises whether a channel has been established, wherein a channel has been established when negotiation for the channel has been completed.

15. The method of claim 14, wherein the set of criteria comprises whether the set of functionalities of a channel provides the highest security.

16. The method of claim 14, wherein the set of criteria comprises whether the set of functionalities of a channel comprises at least one of perfect forward secrecy or malleable encryption.

17. The method of claim 14, wherein the set of criteria comprises whether the set of functionalities of a channel comprises a non-security related functionality.

18. A device for participating in a secure instant messaging session, the device comprising:

a processing system;

a memory coupled to the processing system though a bus; and

a process executed from the memory by the processing system that causes the processing system to concurrently establish a plurality of channels with a remote participant of the secure instant messaging session, wherein each channel provides a different set of functionalities, select one of the plurality of channels based on a set of criteria, and send a message to the remote participant through the selected channel.

19. The device of claim 18, wherein the set of criteria comprises whether a channel has been established, wherein a channel has been established when negotiation for the channel has been completed.

20. The device of claim 19, wherein the set of criteria comprises whether the set of functionalities of a channel provides the highest security.