Secure instant messaging system using instant messaging group policy certificates

• US 7,321,969 B2
• Filed: 04/26/2002
• Issued: 01/22/2008
• Est. Priority Date: 04/26/2002
• Status: Expired due to Fees

• Current Assignee: Cygnacom Solutions, Inc. (Entrust Corp.), Entrust Technologies Limited
• Original Assignee: Entrust Incorporated (Entrust Corp.)
• Inventors: Schoen, Isadore, Boberski, Michael
• Primary Examiner(s): Moazzami, Nasser
• Assistant Examiner(s): Cervetti, David Garcia
• Application Number:
  US10/133,050
• Publication Number:
  US 20030204720A1
• Time in Patent Office: 2,097 Days
• Field of Search: 713/201, 713/153, 713/156, 726/3
• US Class Current: 713/153
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A method and apparatus for facilitating instant messaging utilizes a secure instant message group policy certificate issued by an instant messaging public key infrastructure policy certificate issuing unit. The secure instant messaging group policy certificate is received, such as through a local instant messaging secure public key infrastructure proxy, and contains data defining the group members, references to other groups, security controls and relevant data such as allowed algorithms. The secure instant messaging group policy certificate defines a plurality of different instant messaging groups, each identified by an instant messaging group identifier. Each instant messaging group identifier is associated with a plurality of instant message group number identifiers.

Claims

1. A method for facilitating instant messaging comprising:

receiving a secure instant messaging group policy certificate issued by a instant messaging public key infrastructure (PKI) policy certificate issuing unit wherein the secure instant messaging group policy certificate includes data identifying at least instant messaging group members; and

communicating an instant message from one instant messaging group member to at least another group member based on the data identifying instant messaging group members from the secure instant messaging group policy certificate.

2. The method of claim 1 wherein the secure instant messaging group policy certificate includes an identifier of an authorized state manager that can authorize a change in operation of a secure instant messaging public key infrastructure proxy.

3. The method of claim 1 including the step of restricting instant messaging communications between instant messaging clients such that only buddies designated by the secure instant messaging group policy certificate can communicate instant messages among themselves.

4. The method of claim 3 including the step of broadcasting the secure instant messaging group policy certificate to instant messaging group members identified in the secure instant messaging group policy certificate.

5. The method of claim 1 including the step of issuing the secure instant messaging group policy certificate in response to an emergency event.

6. The method of claim 1 including the steps of:

receiving a secure instant message state change notification in the form of a digitally signed instant message containing an identifier associated with a state change manager; and

comparing the identifier associated with the state change notification to a distinguished name identifier stored from the secure instant messaging group policy certificate to determine whether a group instant messaging state change is authorized; and

if so, executing the state change.

7. The method of claim 6 wherein the secure instant messaging public key infrastructure proxy performs the steps of receiving and comparing.

8. The method of claim 1 wherein the secure instant messaging group policy certificate defines a plurality of different instant messaging groups each identified by an instant messaging group identifier and wherein each instant messaging group identifier is associated with a plurality of instant message group member identifiers.

9. An instant messaging device comprising:

at least one processor; and

memory, operatively coupled to the at least one processor, containing instructions that when executed by one or more processors causes the one or more processors to;

receive a secure instant messaging group policy certificate issued by a instant messaging public key infrastructure (PKI) policy certificate issuing unit wherein the secure instant messaging group policy certificate includes data identifying at least instant messaging group members; and

communicate an instant message from one instant messaging group member to at least another group member based on the data identifying instant messaging group members from the secure instant messaging group policy certificate.

10. The device of claim 9 wherein the secure instant messaging group policy certificate includes an identifier of an authorized state manager that can authorize a change in operation of a secure instant messaging public key infrastructure proxy.

11. The device of claim 10 wherein the memory contains instructions that when executed by one or more processors causes the one or more processors to:

receive a secure instant message state change notification in the form of a digitally signed instant message containing an identifier associated with a state change manager; and

compare the identifier associated with the state change notification to a distinguished name identifier stored from the secure instant messaging group policy certificate to determine whether a group instant messaging state change is authorized; and

if so, execute the state change.

12. The device of claim 9 wherein the secure instant messaging group policy certificate defines a plurality of different instant messaging groups each identified by an instant messaging group identifier and wherein each instant messaging group identifier is associated with a plurality of instant message group member identifiers.