Methods, mediums, and systems for verifying devices in an encrypted messaging system
This application describes methods, mediums, and systems for verifying a device for use in a messaging system. Using the device verification procedures described, a messaging system can securely authorize new devices to send and receive encrypted messages on behalf of a user, preferably without the need to share a private encryption key between the users' different devices. The application describes several techniques that can be used to provide such a system, including distributing a computer-perceptible code that encodes encryption information between a secondary device and a primary device. This allows the information to be distributed without intervention by a server. Other techniques provide unique ways to build and reverify authorized device lists, distribute encryption keys in chat channels, ensure that lists of authorized devices are distributed in the correct order and remain valid for an appropriate amount of time, add new devices to an ongoing or new conversation, and more.
1. A method, comprising:
receiving, at a primary device associated with a user in an encrypted messaging system, a computer-perceptible code from a secondary device;
retrieving a reference and an identifier of the secondary device from the computer-perceptible code, the reference configured to identify a location of the secondary device in the encrypted messaging system;
generating, at the primary device, a secondary device signature based on the identifier of the secondary device;
encrypting, using a secret pairing key, a payload including a list of authorized devices of the user and the secondary device signature;
generating a request, including the encrypted payload and the reference, to add the secondary device to the list of authorized devices of the user, the request configured to identify the secondary device to a server of the encrypted messaging system based on the reference; and
transmitting the request to the server, wherein an encrypted session is established between the primary device and the secondary device based on a validation of the request at the secondary device using the identifier of the secondary device.
2. The method of claim 1 , wherein the encrypted messaging system is represented as a set of interconnected nodes representing messaging servers, and the reference identifies a specific node to which the secondary device is connected.
3. The method of claim 1 , wherein the computer-perceptible code further comprises the identifier for the secondary device, and the request is further configured to add the identifier of the secondary device to the list of authorized devices.
4. The method of claim 1 , further comprising generating a signature based on a list of currently authorized devices known to the primary device, wherein the request further comprises the signature.
5. The method of claim 4 , further comprising extracting the secret pairing key from the computer-perceptible code, wherein the signature based on the list of currently authorized devices is encrypted with the secret pairing key.
6. The method of claim 1 , wherein the primary device is the only device associated with the user that is authorized to generate requests to add additional devices to the list of authorized devices.
7. The method of claim 1 , wherein the primary device does not receive identifying information about the secondary device from the server.
8. A non-transitory computer-readable medium storing instructions configured to cause a processor to:
receive, at a primary device associated with a user in an encrypted messaging system, a computer-perceptible code from a secondary device;
retrieve a reference and an identifier of the secondary device from the computer-perceptible code, the reference configured to identify a location of the secondary device in the encrypted messaging system;
generate, at the primary device, a secondary device signature based on the identifier of the secondary device;
encrypt, using a secret pairing key, a payload including a list of authorized devices of the user and the secondary device signature;
generate a request, including the encrypted payload and the reference, to add the secondary device to the list of authorized devices of the user, the request configured to identify the secondary device to a server of the encrypted messaging system based on the reference; and
transmit the request to the server, wherein an encrypted session is established between the primary device and the secondary device based on a validation of the request at the secondary device using the identifier of the secondary device.
9. The non-transitory computer-readable medium of claim 8 , wherein the encrypted messaging system is represented as a set of interconnected nodes representing messaging servers, and the reference identifies a specific node to which the secondary device is connected.
10. The non-transitory computer-readable medium of claim 8 , wherein the computer-perceptible code further comprises the identifier for the secondary device, and the request is further configured to add the identifier of the secondary device to the list of authorized devices.
11. The non-transitory computer-readable medium of claim 8 , further storing instructions configured to cause the processor to generate a signature based on a list of currently authorized devices known to the primary device, wherein the request further comprises the signature.
12. The non-transitory computer-readable medium of claim 11 , further storing instructions configured to cause the processor to extract the secret pairing key from the computer-perceptible code, wherein the signature based on the list of currently authorized devices is encrypted with the secret pairing key.
13. The non-transitory computer-readable medium of claim 8 , wherein the primary device is the only device associated with the user that is authorized to generate requests to add additional devices to the list of authorized devices.
14. The non-transitory computer-readable medium of claim 8 , wherein the primary device does not receive identifying information about the secondary device from the server.
15. An apparatus, comprising:
a processor; and
a non-transitory computer-readable medium storing instructions configured to cause the processor to:
receive, at a primary device associated with a user in an encrypted messaging system, a computer-perceptible code from a secondary device;
retrieve a reference and an identifier of the secondary device from the computer-perceptible code, the reference configured to identify a location of the secondary device in the encrypted messaging system;
generate, at the primary device, a secondary device signature based on the identifier of the secondary device;
encrypt, using a secret pairing key, a payload including a list of authorized devices of the user and the secondary device signature;
generate a request, including the encrypted payload and the reference, to add the secondary device to the list of authorized devices of the user, the request configured to identify the secondary device to a server of the encrypted messaging system based on the reference; and
transmit the request to the server, wherein an encrypted session is established between the primary device and the secondary device based on a validation of the request at the secondary device using the identifier of the secondary device.
16. The apparatus of claim 15 , wherein the encrypted messaging system is represented as a set of interconnected nodes representing messaging servers, and the reference identifies a specific node to which the secondary device is connected.
17. The apparatus of claim 15 , wherein the computer-perceptible code further comprises the identifier for the secondary device, and the request is further configured to add the identifier of the secondary device to the list of authorized devices.
18. The apparatus of claim 15 , wherein the medium further stores instructions configured to cause the processor to generate a signature based on a list of currently authorized devices known to the primary device, wherein the request further comprises the signature.
19. The apparatus of claim 18 , wherein the medium further stores instructions configured to cause the processor to extract the secret pairing key from the computer-perceptible code, wherein the signature based on the list of currently authorized devices is encrypted with the secret pairing key.
20. The apparatus of claim 15 , wherein the primary device is the only device associated with the user that is authorized to generate requests to add additional devices to the list of authorized devices.