Message protection
View Patent ↗There is disclosed in an example a computing apparatus, comprising: a network interface; a messaging application to communicate via the network interface; and one or more logic elements comprising a security layer, discrete from the messaging application, to: generate a message; secure the message; and send the message via the messaging application.
1. A computing apparatus, comprising:
a processor and memory;
a network interface;
a messaging application to communicate via the network interface; and
instructions stored on the memory and configured to instruct the processor to provide a security layer comprising a third-party security-aware software keyboard different from an operating system-provided keyboard and discrete from the messaging application, the security layer configured to:
generate a sensitive message from user input to the third-party software keyboard;
secure the sensitive message, comprising encrypting the user input into an encrypted message, and embedding the encrypted message into a dummy conveyor element via steganography; and
send the secured message via the messaging application, comprising sending a multimedia text message with the conveyor element as an attachment, wherein the conveyor element is a digital file, a video file, or a multimedia file.
2. The computing apparatus of claim 1 , wherein the apparatus is a mobile device.
3. The computing apparatus of claim 1 , wherein the security layer is further to enforce a policy for the secured message.
4. The computing apparatus of claim 1 , wherein the steganography is compression resistant.
5. The computing apparatus of claim 1 , wherein the security layer is to communicate with a backend server to negotiate a security key.
6. The computing apparatus of claim 1 , wherein the security layer is to communicate with a backend server to negotiate a policy for the secured message.
7. The computing apparatus of claim 6 , wherein the policy is a retention policy with a maximum retention period.
8. The one or more tangible, non-transitory computer-readable storage mediums of claim 1 , wherein the steganography is compression resistant.
9. The computing apparatus of claim 1 , wherein the security aware keyboard is a default input method for the apparatus.
10. A computing apparatus, comprising:
a storage;
a processor and memory;
a network interface;
a networking application to communicate via the network interface; and
instructions stored on the storage and configured to instruct the processor to provide a security layer comprising a third-party security-aware software keyboard different from an operating system-provided keyboard and discrete from the networking application, the security layer configured to:
receive an incoming sensitive message via the network interface, the incoming sensitive message comprising a steganographic image, wherein the steganographic image comprises an encrypted message from user input to the third-party software keyboard;
secure the sensitive message, comprising storing the encrypted message from user input on the storage, and embedding the encrypted message into a dummy conveyor element via steganography, wherein the conveyor element is embedded into a multimedia text message with the conveyor element as an attachment, wherein the conveyor element is a digital file, a video file, or a multimedia file;
detect the stored encrypted message on the storage;
reverse the steganography; and
decrypt the encrypted message.
11. The computing apparatus of claim 10 , wherein the security layer is further to enforce a policy attached to the sensitive message.
12. The computing apparatus of claim 11 , wherein enforcing the policy comprises destroying the sensitive message after expiry of a time to live for the sensitive message.
13. One or more tangible, non-transitory computer-readable storage mediums having stored thereon executable instructions to provide a security layer comprising a third-party security-aware software keyboard different from an operating system-provided keyboard and discrete from a messaging application, the security layer configured to:
generate a sensitive message from user input to the third-party software keyboard;
secure the sensitive message, comprising encrypting the user input into an encrypted message, and embedding the encrypted message into a dummy conveyor element via steganography; and
send the secured message via the messaging application, comprising sending a multimedia text message with the conveyor element as an attachment, wherein the conveyor element is a digital file, a video file, or a multimedia file, wherein the messaging application is operable to send the sensitive message via a network interface.
14. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein the security layer is further to enforce a policy for the secured message.
15. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein the security layer is to communicate with a backend server to negotiate a security key.
16. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein the security layer is to communicate with a backend server to negotiate a policy for the secured message.
17. The one or more tangible, non-transitory computer-readable storage mediums of claim 16 , wherein the policy is a retention policy with a maximum retention period.
18. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein the security aware keyboard is a default input method for an apparatus.