Extensible personality-based messaging system in a distributed computerized infrastructure for establishing a social network

• US 9,571,462 B1
• Filed: 02/04/2013
• Issued: 02/14/2017
• Est. Priority Date: 02/04/2013
• Status: Active Grant

• Current Assignee: Intersections Incorporated (Aura Sub, LLC)
• Original Assignee: Anchorfree Incorporated
• Inventors: Kuzmenko, Roman
• Primary Examiner(s): Zhao, Don
• Application Number:
  US13/757,867
• Time in Patent Office: 1,471 Days
• Field of Search: 713/193, 713/170, 713/171, 380/231
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/1044 Group management mechanisms management of multicast group membership H04L12/185; reconfiguring of node membership in a computing system to eliminate errors G06F11/1425
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

An extensible personality-based secure messaging infrastructure deployed in a computerized system comprising at least one central processing unit, a memory, a storage system and a network interface unit, the system being accessible by a user, the system comprising: an application resource database configured to store at least one resource entry; a contact information database comprising at least one peer personality entry and an own personality entry, the at least one peer personality entry corresponding to at least one resource entry in the resource database; a key storage operatively coupled to the contact information database and comprising a plurality of communication channel key entries, a plurality of peer personalities key entries and a plurality of application resource key entries, and at least one of the plurality of the peer personalities key entries corresponding to at least one peer personality entry in the contact information database.

Claims

1. An extensible personality-based secure messaging system accessible by a user, the messaging system comprising:

at least one computing device having a hardware processor coupled with memory;

at least one client associated with the hardware processor and configured to enable the user to invite a recipient of peer parties to join a secure communication using a peer personalities key associated with peer personalities; and

at least one server configured to trigger automatic key exchange of the peer personalities key with the recipient to enable personality-based secure messaging between the user and the recipient, the key exchange taking place without a manual approval from the recipient, wherein the at least one server comprises;

an application resource database configured to store at least one application resource entry descriptive of a software application in a storage system;

a contact information database comprising at least one peer personality entry and an own personality entry, the at least one peer personality entry corresponding to the at least one application resource entry in the application resource database;

a key storage, a memory and a storage system operatively coupled to the contact information database and further comprising a plurality of communication channel key entries, a plurality of peer personalities key entries and a plurality of application resource key entries,

wherein at least one of the plurality of the peer personalities key entries corresponding to at least one peer personality entry in the contact information database and at least one of the plurality of the application resource key entries corresponding to the at least one application resource entry in the application resource database, the peer personalities key is retrieved from peer personalities key entries and derived at the server based on at least one of data associated with the channel key entries and application resource key entries so as to make the personality-based secure messaging accessible to any recipient of entire public.

2. The extensible personality-based secure messaging system of claim 1, wherein the at least one application resource entry comprises:

a personality identifier, a resource identifier and application data.

3. The extensible personality-based secure messaging system of claim 1, wherein the peer personality entry comprises:

a personality identifier, at least one account information record and at least one application information record and wherein the own personality entry comprises a personality identifier and at least one account information record.

4. The extensible personality-based secure messaging system of claim 1, wherein each of the plurality of communication channel key entries comprises an account information record and a corresponding cryptographic key.

5. The extensible personality-based secure messaging system of claim 1, wherein each of the plurality of peer personalities key entries comprises a personality identifier records and a corresponding cryptographic key.

6. The extensible personality-based secure messaging system of claim 1, wherein each of the plurality of application resource key entries comprises a resource identifier records and a corresponding cryptographic key.

7. The extensible personality-based secure messaging system of claim 1, wherein the at least one client further comprises a secure messaging plugin configured to use a cryptographic key stored in at least one of the communication channel key entries to establish a secure communication channel with the least one server.

8. The extensible personality-based secure messaging system of claim 1, wherein the plurality of peer personalities key entries comprises an own personality key entry comprising personality identifier record and a corresponding cryptographic key.

9. The extensible personality-based secure messaging system of claim 1, further comprising a secure messaging network filter configured to use a cryptographic key stored in at least one of the communication channel key entries or an own personality key entry to alter messages between the at least one client and the at least one server.

10. The extensible personality-based secure messaging system of claim 1, further comprising a user interface configured to register a personality of a peer party public key with at least one of the application resource database, the contact information database and the key storage.

11. A computer-implemented method for enabling an extensible personality-based secure messaging infrastructure, the method being performed in connection with a messaging system comprising:

at least one computing device having a hardware processor coupled with memory;

at least one client associated with the hardware processor and configured to enable the user to invite a recipient of peer parties to join a secure communication using a peer personalities key associated with peer personalities; and

at least one server configured to trigger automatic key exchange of the peer personalities key with the recipient to enable personality-based secure messaging between the user and the recipient, the key exchange taking place without a manual approval from the recipient, wherein the method comprises;

storing, in an application resource database operating in connection with the storage system, at least one application resource entry descriptive of a software application;

storing, in a contact information database, at least one peer personality entry and an own personality entry, the at least one peer personality entry corresponding to at least one resource entry in the resource database;

storing, in a key storage, a memory and a storage system operatively coupled to the contact information database, a plurality of communication channel key entries, a plurality of peer personalities key entries and a plurality of application resource key entries,

wherein at least one of the plurality of the peer personalities key entries corresponding to at least one peer personality entry in the contact information database and at least one of the plurality of the application resource key entries corresponding to the at least one resource entry in the application resource database, the peer personalities key is retrieved from peer personalities key entries and derived at the server based on at least one of data associated with the channel key entries and application resource key entries so as to make the personality-based secure messaging accessible to any recipient of entire public.

12. The computer-implemented method of claim 11, wherein the at least one resource entry in the resource database comprises:

a personality identifier, a resource identifier and application data.

13. The computer-implemented method of claim 11, wherein the peer personality entry comprises:

a personality identifier, at least one account information record and at least one application information record and wherein the own personality entry comprises a personality identifier and at least one account information record.

14. The computer-implemented method of claim 11, wherein each of the plurality of communication channel key entries comprises an account information record and a corresponding cryptographic key.

15. The computer-implemented method of claim 11, wherein each of the plurality of peer personalities key entries comprises a personality identifier records and a corresponding cryptographic key.

16. The computer-implemented method of claim 11, wherein each of the plurality of application resource key entries comprises a resource identifier records and a corresponding cryptographic key.

17. The computer-implemented method of claim 11, wherein the at least one client comprises a secure messaging plugin configured to use a cryptographic key stored in at least one of the communication channel key entries to establish a secure communication channel with the least one server.

18. The computer-implemented method of claim 11, wherein the plurality of peer personalities key entries comprises an own personality key entry comprising personality identifier record and a corresponding cryptographic key.

19. The computer-implemented method of claim 11, further comprising providing a secure messaging network filter configured to use a cryptographic key stored in at least one of the communication channel key entries or an own personality key entry to alter messages between the at least one client and the at least one server.

20. A non-transitory computer-readable medium embodying a set of computer instructions, the set of computer instructions, when executed by a messaging system comprising:

at least one computing device having a hardware processor coupled with memory;

at least one client associated with the hardware processor and configured to enable the user to invite a recipient of peer parties to join a secure communication using a peer personalities key associated with peer personalities; and

at least one server configured to trigger automatic key exchange of the peer personalities key with the recipient to enable personality-based secure messaging between the user and the recipient, the key exchange taking place without a manual approval from the recipient, causing the messaging system to perform a method comprising;

storing, in an application resource database, at least one application resource entry descriptive of a software application;

storing, in a contact information database, at least one peer personality entry and an own personality entry, the at least one peer personality entry corresponding to at least one resource entry in the resource database;

storing, in a key storage operatively coupled to the contact information database, a plurality of communication channel key entries, a plurality of peer personalities key entries and a plurality of application resource key entries,

wherein at least one of the plurality of the peer personalities key entries corresponding to at least one peer personality entry in the contact information database and at least one of the plurality of the application resource key entries corresponding to the at least one resource entry in the application resource database, the peer personalities key is retrieved from peer personalities key entries and derived at the server based on at least one of data associated with the channel key entries and application resource key entries so as to make the personality-based secure messaging accessible to any recipient of entire public.