Systems and methods for secure data exchange in a distributed collaborative application
View Patent ↗A collaborative communication system that includes a plurality of endpoints and interconnecting nodes configured to communicate via messages over interconnecting channels. Each of the plurality of endpoints and/or interconnecting nodes can determine whether to apply protection to the messages on a per message basis and/or base on the interconnecting channel being used. Thus, a balance between adequate protection and use of system resources and bandwidth can be maintained.
1. A collaborative communication system, comprising:
a plurality of interconnecting channels configured to route messages between endpoints, wherein the system does not require a secure link connection based upon a degree of flexibility of an individual message protection;
a plurality of endpoints configured to communicate the messages with other of the plurality of endpoints via the plurality of channels, each of the plurality of endpoints further configured to selectively apply protection to the messages, based on a degree of trust of each of the endpoints based on a configuration of the endpoints that determines whether the messages should be protected prior to communication with the other of the plurality of endpoints, if the messages had previously been encrypted and a degree of sensitivity of a content of the messages, sent to other endpoints on a per message basis; and
the plurality of endpoints of the collaborative communication system configured to identify a dynamic change in message properties, connection properties, properties of a channel producing the message or a combination of the message, connection and channel properties and a dynamic change in a decision criteria and selectively apply a determination based on the dynamic change in the message properties, connection properties, properties of the channel producing or a combination of the message, connection and channel properties and the dynamic change in the decision criteria to selectively employ the protection as needed to each message without a change to the connection.
2. The collaborative communication system of claim 1 , wherein each endpoint is configured to apply protection based on system variables.
3. The collaborative system of claim 2 , wherein the system variables include properties related to an interconnecting channel used by the endpoint to send messages.
4. The collaborative system of claim 2 , wherein the system variables include properties related to each message sent by the endpoint.
5. The collaborative system of claim 2 , wherein the system variables include properties related to a connection used to support the interconnecting channel used by the endpoint to send messages.
6. The collaborative communication system of claim 2 , wherein the system variables are dynamic.
7. The collaborative communication system of claim 2 , wherein the system variables include interconnecting channel trustworthiness.
8. The collaborative communication system of claim 2 , wherein the system variables include message sensitivity.
9. The collaborative communication system of claim 2 , wherein the system variables include whether a message has previously been encrypted.
10. The collaborative communication system of claim 2 , wherein each of the plurality of endpoints is configured to apply a decision criteria to the system variables in order to determine whether to apply protection to a message.
11. The collaborative communication system of claim 10 , wherein at least some of the plurality of endpoints are configured to use different decision criteria relative to other of the plurality of endpoints.
12. The collaborative communication system of claim 2 , wherein at least some of the plurality of endpoints are configured to consider different system variables relative to other of the plurality of endpoints.
13. The collaborative communication system of claim 10 , wherein the system variables can be assigned a plurality of values, and wherein the decision criteria uses the values to determine whether protection should be applied.
14. The collaborative communication system of claim 13 , wherein at least some of the plurality of endpoints are configured to assign a different value or weight to the system variables relative to other of the plurality of endpoints.
15. The collaboration system of claim 1 , wherein the plurality of endpoints are configured to apply protection by encrypting the messages.
16. The collaboration system of claim 1 , further comprising a plurality of intermediate nodes configured to pass messages from one endpoint to another via the plurality of interconnecting channels, and wherein the intermediate nodes can be configured to determine whether to apply protection to the messages on a per message basis.
17. The collaboration system of claim 1 , further comprising a plurality of contexts, and wherein the plurality of endpoints are configured to join one or more of the plurality of contexts.
18. The collaboration system of claim 17 , wherein each endpoint is configured to apply protection based system variables, and wherein the system variables are different for different contexts of the plurality of contexts.
19. The collaboration system of claim 17 , wherein each endpoint is configured to apply protection based on decision criteria, and wherein the decision criteria are different for different contexts of the plurality of contexts.
20. A collaborative communication system, comprising:
a plurality of interconnecting channels configured to route messages between endpoints;
a plurality of endpoints configured to communicate messages with other of the plurality of endpoints via the plurality of channels, at least some of the plurality of endpoints further configured to selectively apply protection to the messages, based on a degree of trust of each of the endpoints based on a configuration of the endpoints that determines whether the messages should be protected prior to communication with the other of the plurality of endpoints, if the messages had previously been encrypted and a degree of sensitivity of a content of the messages, sent to other endpoints based on the interconnecting channel used to send the messages and at least some of the plurality of endpoints further configured to selectively apply protection to the messages sent to other endpoints on a per message basis; and
the plurality of endpoints of the collaborative communication system configured to identify a dynamic change in message properties, connection properties, properties of a channel producing the message or a combination of the message, connection and channel properties and a dynamic change in a decision criteria and selectively apply a determination based on the dynamic change in the message properties, connection properties, properties of the channel producing or a combination of the message, connection and channel properties and the dynamic change in the decision criteria to selectively employ the protection as needed to each message without a change to the connection.
21. The collaborative communication system of claim 20 , wherein at least some of the endpoints are configured to apply protection based on system variables.
22. The collaborative system of claim 21 , wherein the system variables include properties related to an interconnecting channel used by the endpoint to send messages.
23. The collaborative system of claim 21 , wherein the system variables include properties related each message sent by the endpoint.
24. The collaborative communication system of claim 21 , wherein the system variables are dynamic.
25. The collaborative communication system of claim 21 , wherein the system variables include interconnecting channel trustworthiness.
26. The collaborative communication system of claim 21 , wherein the system variables include message sensitivity.
27. The collaborative communication system of claim 21 , wherein the system variables include whether a message has previously been encrypted.
28. The collaborative communication system of claim 21 , wherein at least some of the plurality of endpoints are configured to apply a decision criteria to the system variables in order to determine whether to apply protection to a message.
29. The collaborative communication system of claim 28 , wherein at least some of the plurality of endpoints are configured to use different decision criteria relative to other of the plurality of endpoints.
30. The collaborative communication system of claim 21 , wherein at least some of the plurality of endpoints are configured to consider different system variables relative to other of the plurality of endpoints.
31. The collaborative communication system of claim 28 , wherein the system variables can be assigned a plurality of values, and wherein the decision criteria uses the values to determine whether protection should be applied.
32. The collaborative communication system of claim 31 , wherein at least some of the plurality of endpoints are configured to assign a different value or weight to the system variables relative to other of the plurality of endpoints.
33. The collaboration system of claim 20 , wherein the plurality of endpoints are configured to apply protection by encrypting the messages.
34. The collaboration system of claim 20 , further comprising a plurality of intermediate nodes configured to pass messages from one endpoint to another via the plurality of interconnecting channels, and wherein the intermediate nodes are be configured to determine whether to apply protection to the messages on a per message basis.
35. The collaboration system of claim 20 , further comprising a plurality of contexts, and wherein the plurality of endpoints are configured to join one or more of the plurality of contexts.
36. The collaboration system of claim 35 , wherein at least some of the endpoint are configured to apply protection based on system variables, and wherein the system variables are different for different contexts of the plurality of contexts.
37. The collaboration system of claim 35 , wherein at least some of the endpoints are configured to apply protection based decision criteria, and wherein the decision criteria are different for different contexts of the plurality of contexts.
38. A collaborative communication system, comprising:
a plurality of interconnecting channels configured to route messages between endpoints;
a plurality of contexts;
a plurality of endpoints configured to communicate messages with other of the plurality of endpoints via the plurality of channels, and to join one or more of the plurality of contexts, each of the plurality of endpoints further configured to selectively apply protection to the messages, based on a degree of trust of each of the endpoints based on a configuration of the endpoints that determines whether the messages should be protected prior to communication with the other of the plurality of endpoints, if the messages had previously been encrypted and a degree of sensitivity of a content of the messages, sent to other endpoints based on a per message basis; and,
the plurality of endpoints of the collaborative communication system configured to identify a dynamic change in message properties, connection properties, properties of a channel producing the message or a combination of the message, connection and channel properties and a dynamic change in a decision criteria and selectively apply a determination based on the dynamic change in the message properties, connection properties, properties of the channel producing or a combination of the message, connection and channel properties and the dynamic change in the decision criteria to selectively employ the protection as needed to each message without a change to the connection.
39. The collaborative communication system of claim 38 , wherein each endpoint is configured to apply protection based on system variables, and wherein the system variables are different for different contexts of the plurality of contexts.
40. The collaborative system of claim 39 , wherein the system variables include properties related to an interconnecting channel used by the endpoint to send messages.
41. The collaborative system of claim 39 , wherein the system variables include properties related to each message sent by the endpoint.
42. The collaborative system of claim 39 , wherein the system variables include properties related to a connection used to support the interconnecting channel used by the endpoint to send messages.
43. The collaborative communication system of claim 39 , wherein the system variables are dynamic.
44. The collaborative communication system of claim 39 , wherein the system variables include interconnecting channel trustworthiness.
45. The collaborative communication system of claim 39 , wherein the system variables include message sensitivity.
46. The collaborative communication system of claim 39 , wherein the system variables include whether a message has previously been encrypted.
47. The collaborative communication system of claim 39 , wherein each of the plurality of endpoints is configured to apply a decision criteria to the system variables in order to determine whether to apply protection to a message, and wherein the decision criteria are different for different context of the plurality of context.
48. The collaborative communication system of claim 47 , wherein at least some of the plurality of endpoints are configured to use different decision criteria relative to other of the plurality of endpoints.
49. The collaborative communication system of claim 39 , wherein at least some of the plurality of endpoints are configured to consider different system variables relative to other of the plurality of endpoints.
50. The collaborative communication system of claim 47 , wherein the system variables can be assigned a plurality of values, and wherein the decision criteria uses the values to determine whether protection should be applied.
51. The collaborative communication system of claim 50 , wherein at least some of the plurality of endpoints are configured to assign a different value or weight to the system variables relative to other of the plurality of endpoints.
52. The collaboration system of claim 39 , wherein the plurality of endpoints are configured to apply protection by encrypting the messages.
53. The collaboration system of claim 39 , further comprising a plurality of intermediate nodes configured to pass messages from one endpoint to another via the plurality of interconnecting channels, and wherein the intermediate nodes can be configured to determine whether to apply protection to the messages on a per message basis.
54. A collaborative communication system, comprising:
a plurality of interconnecting channels configured to route messages;
a plurality of endpoints configured to communicate the messages with other of the plurality of endpoints; and
a plurality of intermediate nodes configured to pass the messages from one endpoint to another via the plurality of interconnecting channels, the intermediate nodes configured to determine whether to apply protection to the messages, based on a degree of trust of each of the endpoints based on a configuration of the endpoints that determines whether the messages should be protected prior to communication with the other of the plurality of endpoints, if the messages had previously been encrypted and a degree of sensitivity of a content of the messages, on a per message basis; and,
the plurality of secondary intermediate nodes configured to pass messages between the plurality of nodes and the plurality of endpoints to identify a dynamic change in message properties, connection properties, properties of the channel producing the message or a combination of message, connection and channel properties and a dynamic change in a decision criteria and selectively apply a determination based on the dynamic change in message properties, connection properties, properties of the channel producing or a combination of message, connection and channel properties and a dynamic change in a decision criteria to selectively employ the protection as needed to each message without a change to the connection.
55. The collaborative communication system of claim 54 , wherein some of the plurality of interconnecting nodes are configured to apply protection based on an interconnecting channel being used.
56. The collaborative communication system of claim 54 , wherein each intermediate node is configured to apply protection based on system variables.
57. The collaborative system of claim 56 , wherein the system variables include properties related to an interconnecting channel used by the endpoint to send messages.
58. The collaborative system of claim 56 , wherein the system variables include properties related to a interconnecting channel used by the interconnecting node to send messages.
59. The collaborative system of claim 56 , wherein the system variables include properties related each message sent by the interconnecting node.
60. The collaborative system of claim 56 , wherein the system variables include properties related to a connection used to support the interconnecting channel used by the endpoint to send messages.
61. The collaborative system of claim 56 , wherein the system variables include properties related to a connection used to support the interconnecting channel used by the interconnecting node to send messages.
62. The collaborative communication system of claim 56 , wherein the system variables are dynamic.
63. The collaborative communication system of claim 56 , wherein the system variables include interconnecting channel trustworthiness.
64. The collaborative communication system of claim 56 , wherein the system variables include message sensitivity.
65. The collaborative communication system of claim 56 , wherein the system variables include whether a message has previously been encrypted.
66. The collaborative communication system of claim 56 , wherein each of the plurality of interconnecting nodes is configured to apply a decision criteria to the system variables in order to determine whether to apply protection to a message.
67. The collaborative communication system of claim 66 , wherein at least some of the plurality of interconnecting nodes are configured to use different decision criteria relative to other of the plurality of interconnecting nodes.
68. The collaborative communication system of claim 56 , wherein at least some of the plurality of interconnecting nodes are configured to consider different system variables relative to other of the plurality of interconnecting nodes.
69. The collaborative communication system of claim 66 , wherein the system variables can be assigned a plurality of values, and wherein the decision criteria uses the values to determine whether protection should be applied.
70. The collaborative communication system of claim 69 , wherein at least some of the plurality of interconnecting nodes are configured to assign a different value or weight to the system variables relative to other of the plurality of interconnecting nodes.
71. The collaboration system of claim 54 , wherein the plurality of interconnecting nodes are configured to apply protection by encrypting the messages.
72. The collaboration system of claim 54 , further comprising a plurality of contexts, and wherein the plurality of endpoints are configured to join one or more of the plurality of contexts.
73. The collaboration system of claim 72 , wherein each interconnecting node is configured to apply protection based on system variables, and wherein the system variables are different for different contexts of the plurality of contexts.
74. The collaboration system of claim 72 , wherein each interconnecting node is configured to apply protection based on decision criteria, and wherein the decision criteria are diflirent fir different contexts of the plurality of contexts.