Methods and systems for processing an ephemeral content message
Exemplary embodiments relate to techniques for transmitting ephemeral content messages. A sending client may establish an end-to-end encrypted session with possible recipients of the message, using a first decryption key during initial session setup. The client may send an ephemeral content message, including encrypted content and a second key, to the recipients through a server. The server may be unable to retrieve the encrypted content due to a lack of the second key. The server may filter a list of intended recipients, and may forward the ephemeral content message to the recipients on the filtered list. The recipients may retrieve the second key from the message, and use the first and second keys to decrypt the encrypted content. The sending client may change the second key each time the recipient list changes from the perspective of the sending client, as determined at the time the ephemeral content message is transmitted.
1. A method, comprising:
receiving setup information for an end-to-end encrypted session between a sending client and a receiving client, the setup information comprising information relating to a first encryption key for decrypting message content;
transmitting the setup information to the receiving client;
receiving a message including ephemeral content, the ephemeral content associated with encrypted media and a second encryption key for decrypting the encrypted media, wherein the message further includes an ephemeral content flag to designate the encrypted media of the message as representing shared ephemeral content;
filtering the list of intended recipients, the filtering comprising:
removing recipients that do not have a symmetric relationship with a sending user account associated with the sending client account from the list,
removing recipients that block messages from the sending user account, and
removing recipients whose messages are blocked by the sending user account; and
transmitting the message including the ephemeral content to the receiving client.
2. The method of claim 1 , wherein the encrypted content comprises a thumbnail of the media, the ephemeral content flag, and media message content, the media message content to comprise the second encryption key and a link to the media.
3. The method of claim 1 , further comprising:
receiving a reply to the message from the receiving client;
determining that the message was transmitted as part of a broadcast; and
sending the reply as part of a one-on-one conversation between a sending user account associated with the sending client and a receiving user account associated with the receiving client.
4. The method of claim 1 , wherein the message is transmitted to a group of recipients, and further comprising receiving a reply to the message, verifying that an encrypted session exists between each pair of members of the group, and transmitting the reply to the group of recipients.
5. The method of claim 1 , further comprising:
establishing a synchronous relationship between a sending user account associated with the sending client and a third user account after receiving the message; and
refraining from transmitting the message to a third device associated the third user.
6. The method of claim 1 , wherein a server that receives the message including the ephemeral content is unable to access the encrypted media.
7. A non-transitory computer-readable medium storing:
instructions configured to cause one or more processors to receive setup information for an end-to-end encrypted session between a sending client and a receiving client, the setup information comprising information relating to a first encryption key for decrypting message content;
instructions configured to cause one or more processors to transmit the setup information to the receiving client;
instructions configured to cause one or more processors to receive a message including ephemeral content, the ephemeral content associated with encrypted media and a second encryption key for decrypting the encrypted media, wherein the message further includes an ephemeral content flag to designate the encrypted media of the message as representing shared ephemeral content;
instructions configured to cause the one or more processors to access a list of intended recipients of the message;
instructions configured to cause the one or more processors to filter the list of intended recipients, the filtering comprising:
removing recipients that do not have a symmetric relationship with a sending user account associated with the sending client account from the list,
removing recipients that block messages from the sending user account, and
removing recipients whose messages are blocked by the sending user account;
and
instructions configured to cause one or more processors to transmit the message including the ephemeral content to the receiving client.
8. The medium of claim 7 , wherein the encrypted content comprises a thumbnail of the media, the ephemeral content flag, and media message content, the media message content to comprise the second encryption key and a link to the media.
9. The medium of claim 7 , further storing:
instructions configured to cause the one or more processors to receive a reply to the message from the receiving client;
instructions configured to cause the one or more processors to determine that the message was transmitted as part of a broadcast; and
instructions configured to cause the one or more processors to send the reply as part of a one-on-one conversation between a sending user account associated with the sending client and a receiving user account associated with the receiving client.
10. The medium of claim 7 , wherein the status update is transmitted to a group of recipients, and further storing instructions configured to cause the one or more processors to receive a reply to the message, verify that an encrypted session exists between each pair of members of the group, and transmit the reply to the group of recipients.
11. The medium of claim 7 , further storing:
instructions configured to cause the one or more processors to establish a synchronous relationship between a sending user account associated with the sending client and a third user account after receiving the message, wherein the one or more processors are configured to refrain from transmitting the message to a third device associated the third user.
12. The medium of claim 7 , wherein a server that receives the message including the ephemeral content is unable to access the encrypted content.
13. An apparatus comprising:
a non-transitory computer-readable medium configured to store setup information for an end-to-end encrypted session between a sending client and a receiving client, the setup information comprising information relating to a first encryption key for decrypting message content;
end-to-end encryption session logic, implemented at least partially in hardware, configured to transmit the setup information to the receiving client;
filtering logic, implemented at least partially in hardware, configured to access a list of intended recipients of the message and filter the list of intended recipients, the filtering comprising:
removing recipients that do not have a symmetric relationship with a sending user account associated with the sending client account from the list,
removing recipients that block messages from the sending user account, and
removing recipients whose messages are blocked by the sending user account; and
network interface logic, implemented at least partially in hardware, configured to receive a message including ephemeral content, the ephemeral content associated with encrypted media and a second encryption key for decrypting the encrypted media, wherein the message further includes an ephemeral content flag to designate the encrypted media of the message as representing shared ephemeral content, and to transmit the message including the ephemeral content to the receiving client.
14. The apparatus of claim 13 , wherein the encrypted content comprises a thumbnail of the media, the ephemeral content flag, and media message content, the media message content to comprise the second encryption key and a link to the media.
15. The apparatus of claim 13 , further comprising verification logic, implemented at least partially in hardware, configured to determine that the message was transmitted as part of a broadcast, wherein the network interface logic is further configured to receive a reply to the status update from the receiving client, and to send the reply as part of a one-on-one conversation between a sending user account associated with the sending client and a receiving user account associated with the receiving client.
16. The apparatus of claim 13 , wherein the message is transmitted to a group of recipients, and further comprising verification logic, implemented at least partially in hardware, configured to verify that an encrypted session exists between each pair of members of the group, wherein the network interface logic is further configured to receive a reply to the status update, and transmit the reply to the group of recipients when the verification logic verifies the existence of the encrypted session.
17. The apparatus of claim 13 , further comprising relationship logic, implemented at least partially in hardware, configured to establish a synchronous relationship between a sending user account associated with the sending client and a third user account after receiving the message, wherein the one or more processors are configured to refrain from transmitting the message to a third device associated the third user.