Directory lookup for federated messaging with a user from a different secure communication network
A secure communication platform includes a user database that allows users from different secure communication networks to perform directory look-ups to access keys, and other information, for recipients outside of their network. Users from different secure communication networks may request, from the database, user information of users outside their secure communication. The user information may allow the users of different secure communication networks to exchange secure communications. The secure communication platform provides a high degree of trust regarding the sender's identity, allowing the receiving network to trust the sender, and allowing the secure communications to flow across different secure communication networks.
1. A method for performing a directory lookup for federated messaging, the method comprising:
receiving, at a first server from a first user device belonging to a first secure communication network, a first identifier of a second user associated with a second device and belonging to a second secure communication network, wherein the first user device is associated with a first security group identifier and the second device is associated with a second security group identifier;
determining, by the first server, that the first user device is permitted to communicate with the second secure communication network based on a first set of permissions associated with the first security group identifier indicating that the first user device is permitted to communicate with the second secure communication network;
determining, by the first server, whether the second user is permitted to communicate with the first secure communication network based on a second set of permissions associated with the second secure communication network;
when the second user is permitted to receive communications from the first secure communication network, providing, from the first server to the first user device, profile information of the second user.
2. The method of claim 1 , wherein the determining whether the second device is permitted to receive communications from the first secure communication network comprises:
determining whether a second set of permissions associated with the second security group identifier permits the second device to receive communications from the first secure communication network.
3. The method of claim 1 , comprising:
providing, from the first server, an indication to the first user device that the second user is unavailable when the first user device is not permitted to transmit communications to the second communication network.
4. The method of claim 1 , comprising:
providing, from the first server, an indication to the first user device that the second user is unavailable when the second device is not permitted to receive communications from the first communication network.
5. The method of claim 1 , wherein the first identifier is at least one of a phone number, an email address, and a native identifier.
6. A system for performing a directory lookup for federated messaging, the system comprising:
an interface configured to receive a first identifier of a second user associated with a second device and belonging to a second secure communication network from a first user device belonging to a first secure communication network, wherein the first user device is associated with a first security group identifier and the second device is associated with a second security group identifier;
a processor configured to determine whether that the first user device is permitted to communicate with the second secure communication network based on a first set of permissions associated with the first security group identifier indicating that the first user device is permitted to communicate with the second secure communication network, determine whether the second user is permitted to communicate with the first secure communication network based on a second set of permissions associated with the second secure communication network, and provide profile information of the second user to the first user device when the first user device and the second user are permitted to communicate; and
a memory coupled to the processor and configured to provide the processor with instructions for determining whether to provide the second user's profile to the first user device.
7. The system of claim 6 , wherein the processor is further configured to determine whether a second set of permissions associated with the second security group identifier permits the second device to receive communications from the first secure communication network.
8. The system of claim 6 , wherein the processor is configured to provide an indication to the first user device that the second user is unavailable when the first user device is not permitted to transmit communications to the second communication network.
9. The system of claim 6 , wherein the processor is configured to provide an indication to the first user device that the second user is unavailable when the second device is not permitted to receive communications from the first communication network.
10. The system of claim 6 , wherein the first identifier is at least one of a phone number, an email address, and a native identifier.
11. A non-transitory computer-readable medium comprising instructions that when, executed by at least one processor, perform the steps of:
receiving, at a first server from a first user device belonging to a first secure communication network, a first identifier of a second user associated with a second device and belonging to a second secure communication network, wherein the first user device is associated with a first security group identifier and the second device is associated with a second security group identifier;
determining, by the first server, whether that the first user device is permitted to communicate with the second secure communication network based on a first set of permissions associated with the first security group identifier indicating that the first user device is permitted to communicate with the second secure communication network;
when the first user device is permitted to transmit communications to the second communication network, determining, by the first server, whether the second user is permitted to communicate with the first secure communication network based on a second set of permissions associated with the second secure communication network;
when the second user is permitted to receive communications from the first communication network, providing, from the first server to the first user device, profile information of the second user.
12. The non-transitory computer-readable medium of claim 11 , wherein the determining whether the second device is permitted to receive communications from the first secure communication network comprises:
determining whether a second set of permissions associated with the second security group identifier permits the second device to receive communications from the first secure communication network.
13. The non-transitory computer-readable medium claim 11 , comprising:
providing, from the first server, an indication to the first user device that the second user is unavailable when the first user device is not permitted to transmit communications to the second communication network.
14. The non-transitory computer-readable medium claim 11 , comprising:
providing, from the first server, an indication to the first user device that the second user is unavailable when the second device is not permitted to receive communications from the first communication network.
15. The non-transitory computer-readable medium claim 11 , wherein the first identifier is at least one of a phone number, an email address, and a native identifier.