Secure instant messaging system using instant messaging group policy certificates
View Patent ↗A method and apparatus for facilitating instant messaging utilizes a secure instant message group policy certificate issued by an instant messaging public key infrastructure policy certificate issuing unit. The secure instant messaging group policy certificate is received, such as through a local instant messaging secure public key infrastructure proxy, and contains data defining the group members, references to other groups, security controls and relevant data such as allowed algorithms. The secure instant messaging group policy certificate defines a plurality of different instant messaging groups, each identified by an instant messaging group identifier. Each instant messaging group identifier is associated with a plurality of instant message group number identifiers.
1. A method for facilitating instant messaging comprising:
receiving a secure instant messaging group policy certificate issued by a instant messaging public key infrastructure (PKI) policy certificate issuing unit wherein the secure instant messaging group policy certificate includes data identifying at least instant messaging group members; and
communicating an instant message from one instant messaging group member to at least another group member based on the data identifying instant messaging group members from the secure instant messaging group policy certificate.
2. The method of claim 1 wherein the secure instant messaging group policy certificate includes an identifier of an authorized state manager that can authorize a change in operation of a secure instant messaging public key infrastructure proxy.
3. The method of claim 1 including the step of restricting instant messaging communications between instant messaging clients such that only buddies designated by the secure instant messaging group policy certificate can communicate instant messages among themselves.
4. The method of claim 3 including the step of broadcasting the secure instant messaging group policy certificate to instant messaging group members identified in the secure instant messaging group policy certificate.
5. The method of claim 1 including the step of issuing the secure instant messaging group policy certificate in response to an emergency event.
6. The method of claim 1 including the steps of:
receiving a secure instant message state change notification in the form of a digitally signed instant message containing an identifier associated with a state change manager; and
comparing the identifier associated with the state change notification to a distinguished name identifier stored from the secure instant messaging group policy certificate to determine whether a group instant messaging state change is authorized; and
if so, executing the state change.
7. The method of claim 6 wherein the secure instant messaging public key infrastructure proxy performs the steps of receiving and comparing.
8. The method of claim 1 wherein the secure instant messaging group policy certificate defines a plurality of different instant messaging groups each identified by an instant messaging group identifier and wherein each instant messaging group identifier is associated with a plurality of instant message group member identifiers.
9. An instant messaging device comprising:
at least one processor; and
memory, operatively coupled to the at least one processor, containing instructions that when executed by one or more processors causes the one or more processors to:
receive a secure instant messaging group policy certificate issued by a instant messaging public key infrastructure (PKI) policy certificate issuing unit wherein the secure instant messaging group policy certificate includes data identifying at least instant messaging group members; and
communicate an instant message from one instant messaging group member to at least another group member based on the data identifying instant messaging group members from the secure instant messaging group policy certificate.
10. The device of claim 9 wherein the secure instant messaging group policy certificate includes an identifier of an authorized state manager that can authorize a change in operation of a secure instant messaging public key infrastructure proxy.
11. The device of claim 10 wherein the memory contains instructions that when executed by one or more processors causes the one or more processors to:
receive a secure instant message state change notification in the form of a digitally signed instant message containing an identifier associated with a state change manager; and
compare the identifier associated with the state change notification to a distinguished name identifier stored from the secure instant messaging group policy certificate to determine whether a group instant messaging state change is authorized; and
if so, execute the state change.
12. The device of claim 9 wherein the secure instant messaging group policy certificate defines a plurality of different instant messaging groups each identified by an instant messaging group identifier and wherein each instant messaging group identifier is associated with a plurality of instant message group member identifiers.