Systems and methods for secure data exchange in a distributed collaborative application
A collaborative communication system that includes a plurality of endpoints and interconnecting nodes configured to communicate via messages over interconnecting channels. Each of the plurality of endpoints and/or interconnecting nodes can determine whether to apply protection to the messages on a per message basis and/or base on the interconnecting channel being used. Thus, a balance between adequate protection and use of system resources and bandwidth can be maintained.
1. A system, comprising:
at least one of a plurality of endpoints configured to apply protection to messages sent to other endpoints on a per message basis, the plurality of endpoints configured to identify a dynamic change in message properties and connection properties, and apply the protection as needed to each message without a change to a predefined connection, wherein to apply protection comprises a protection being applied to at least one message among the messages to be transmitted across the predefined connection prior to the at least one message being transmitted across the predefined connection, wherein levels are determined for degree of trust associated with content of the at least one message and provided to provide a required degree of protection for the at least one message.
2. The system of claim 1 , wherein the protection to be applied is based on system variables, wherein the system variables include one or more of:
properties related to an interconnecting channel used by the endpoint to send messages;
properties related to each message sent by the endpoint;
properties related to a connection used to support an interconnecting channel used by the endpoint to send messages;
interconnecting channel trustworthiness;
message sensitivity;
whether a message has previously been encrypted; and
can be assigned a plurality of values, and wherein the decision criteria uses the values to determine whether protection should be applied.
3. The system of claim 1 , wherein at least one of the plurality of endpoints is configured to perform one or more of:
selectively apply the protection to the messages sent to the other endpoints;
apply a decision criteria to the system variables in order to determine whether to apply protection to a message;
use different decision criteria relative to other of the plurality of endpoints;
consider different system variables relative to other of the plurality of endpoints;
assign a different value or weight to the system variables relative to other of the plurality of endpoints;
apply protection by encrypting the messages;
apply protection based system variables, and wherein the system variables are different for different contexts of the plurality of contexts; and
apply protection based on decision criteria, and wherein the decision criteria are different for different contexts of the plurality of contexts.
4. The system of claim 1 , wherein the degree of trust placed in a connection is relative to a sending device.
5. The system of claim 1 , further comprising a plurality of contexts, and wherein the plurality of endpoints are configured to join one or more of the plurality of contexts.
6. A method, comprising:
applying protection, by at least one of a plurality of endpoints, to messages sent to other endpoints on a per message basis;
identifying, by the at least one of the plurality of endpoints, a change in message properties and connection properties; and
applying the protection as needed to each message without a change to a predefined connection;
wherein applying the protection comprises a protection being applied to at least one message among the messages to be transmitted across the predefined connection prior to the at least one message being transmitted across the predefined connection;
wherein levels are determined for degree of trust associated with content of the at least one message and provided to provide a required degree of protection for the at least one message.
7. The method of claim 6 , wherein the protection to be applied is based on system variables, wherein the system variables include one or more of:
properties related to an interconnecting channel used by the endpoint to send messages;
properties related to each message sent by the endpoint;
properties related to a connection used to support an interconnecting channel used by the endpoint to send messages;
interconnecting channel trustworthiness;
message sensitivity;
whether a message has previously been encrypted; and
can be assigned a plurality of values, and wherein the decision criteria uses the values to determine whether protection should be applied.
8. The method of claim 6 , wherein at least one of the plurality of endpoints is configured to perform one or more of:
selectively apply the protection to the messages sent to the other endpoints;
apply a decision criteria to the system variables in order to determine whether to apply protection to a message;
use different decision criteria relative to other of the plurality of endpoints;
consider different system variables relative to other of the plurality of endpoints;
assign a different value or weight to the system variables relative to other of the plurality of endpoints;
apply protection by encrypting the messages;
apply protection based system variables, and wherein the system variables are different for different contexts of the plurality of contexts; and
apply protection based on decision criteria, and wherein the decision criteria are different for different contexts of the plurality of contexts.
9. The method of claim 6 , wherein the degree of trust placed in a connection is relative to a sending device.
10. The method of claim 6 , further comprising a plurality of contexts, and wherein the plurality of endpoints are configured to join one or more of the plurality of contexts.
11. A non-transitory computer readable medium comprising instructions that, when read by a processor, cause the processor to perform:
applying protection, by at least one of a plurality of endpoints, to messages sent to other endpoints on a per message basis;
identifying, by the at least one of the plurality of endpoints, a change in message properties and connection properties; and
applying the protection as needed to each message without a change to a predefined connection;
wherein applying the protection comprises a protection being applied to at least one message among the messages to be transmitted across the predefined connection prior to the at least one message being transmitted across the predefined connection;
wherein levels are determined for degree of trust associated with content of the at least one message and provided to provide a required degree of protection for the at least one message.
12. The non-transitory computer readable medium of claim 11 , wherein the protection to be applied is based on system variables, wherein the system variables include one or more of:
properties related to an interconnecting channel used by the endpoint to send messages;
properties related to each message sent by the endpoint;
properties related to a connection used to support an interconnecting channel used by the endpoint to send messages;
interconnecting channel trustworthiness;
message sensitivity;
whether a message has previously been encrypted; and
can be assigned a plurality of values, and wherein the decision criteria uses the values to determine whether protection should be applied.
13. The non-transitory computer readable medium of claim 11 , wherein at least one of the plurality of endpoints is configured to perform one or more of:
selectively apply the protection to the messages sent to the other endpoints;
apply a decision criteria to the system variables in order to determine whether to apply protection to a message;
use different decision criteria relative to other of the plurality of endpoints;
consider different system variables relative to other of the plurality of endpoints;
assign a different value or weight to the system variables relative to other of the plurality of endpoints;
apply protection by encrypting the messages;
apply protection based system variables, and wherein the system variables are different for different contexts of the plurality of contexts; and
apply protection based on decision criteria, and wherein the decision criteria are different for different contexts of the plurality of contexts.
14. The non-transitory computer readable medium of claim 11 , wherein the degree of trust placed in a connection is relative to a sending device.
15. The non-transitory computer readable medium of claim 11 , further comprising a plurality of contexts, and wherein the plurality of endpoints are configured to join one or more of the plurality of contexts.