Digital security bubble
A digital security bubble encapsulation is disclosed. A public key and a device identifier of at least one recipient is requested from a first server. A message containing one or more components is encrypted using a symmetric key. The symmetric key is encrypted with a public key received in response to the request. The encrypted message, the encrypted symmetric key, and the device identifier are encapsulated in a digital security bubble encapsulation. The digital security bubble encapsulation is transmitted to a second server.
1. A method comprising:
receiving, at a first device, a notification of an encrypted encapsulation from a security platform;
obtaining, by the first device, the encrypted encapsulation from the security platform in response to receiving the notification, wherein the encrypted encapsulation includes an encrypted message, an encrypted first key, and a device identifier associated with an intended recipient;
decrypting, by the first device, the encrypted encapsulation;
comparing, by the first device, the received device identifier with a local device identifier;
decrypting, by the first device, the encrypted first key using a private key of the intended recipient in response to a determination that the received device identifier matches the local device identifier;
decrypting, by the first device, the encrypted message using the first key to produce a decrypted message; and
providing, by the first device, the decrypted message to a recipient.
2. The method of claim 1 , wherein the device identifier is based at least in part on at least one hardware identifier.
3. The method of claim 1 , wherein the first key is a symmetric key.
4. The method of claim 1 , wherein the encrypted encapsulation includes a plurality of encrypted first keys.
5. The method of claim 4 , wherein each of the plurality of encrypted first keys is encrypted with a second key associated with an intended recipient.
6. The method of claim 1 , wherein the encapsulation includes at least one message control option selected from the group consisting of message lifetime, sharing, saving, forwarding, recalling, and deleting.
7. The method of claim 6 , comprising:
deleting, by the first device, the decrypted message after an expiration of the lifetime option.
8. A non-transitory computer-readable medium comprising instructions that, when executed by a processor, perform the steps of:
receiving a notification of an encrypted encapsulation from a security platform;
obtaining the encrypted encapsulation from the security platform in response to receiving the notification, wherein the encrypted encapsulation includes an encrypted message, an encrypted first key, and a device identifier associated with an intended recipient;
decrypting the encrypted encapsulation;
comparing the received device identifier with a local device identifier;
decrypting the encrypted first key using a private key of the intended recipient in response to a determination that the received device identifier matches the local device identifier;
decrypting the encrypted message using the first key to produce a decrypted message; and
providing the decrypted message to a recipient.
9. The non-transitory computer-readable medium of claim 8 , wherein the device identifier is based at least in part on at least one hardware identifier.
10. The non-transitory computer-readable medium of claim 8 , wherein the first key is a symmetric key.
11. The non-transitory computer-readable medium of claim 8 , wherein the encrypted encapsulation includes a plurality of encrypted first keys.
12. The non-transitory computer-readable medium of claim 11 , wherein each of the plurality of encrypted first keys is encrypted with a second key associated with an intended recipient.
13. The non-transitory computer-readable medium of claim 8 , comprising computer instructions for:
deleting the decrypted message after an expiration of a lifetime option included in the encrypted encapsulation.