Enabling and disabling end-to-end encryption in multiparty conference

1. A computer-implemented method for engaging in an online meeting session in which an end-to-end encryption session is enabled, the method comprising:

determining that a first participant using a first participant device of multiple participant devices connected to the online meeting session has permission to disable end-to-end encryption;

in response to determining that the first participant has the permission to disable end-to-end encryption, sending, by the first participant device to a key orchestration server, a first disable message to disable the end-to-end encryption session, wherein the first disable message is an encrypted message to disable the end-to-end encryption session;

receiving, by the first participant device, a second encrypted message from the key orchestration server indicating that a second participant device, of the multiple participant devices, has initiated disabling of the end-to-end encryption session;

wherein the second encrypted message originated from the second participant device; and

in response to receiving the second encrypted message, disabling, by the first participant device, the end-to-end encryption session while maintaining the online meeting session.

2. The computer-implemented method of claim 1 , wherein the online meeting session is hosted by a meeting server.

3. The computer-implemented method of claim 1 , wherein the end-to-end encryption session is managed by key orchestration server, implemented to manage encryption keys for a plurality of participants of the end-to-end encryption session and to route encrypted messages between the plurality of participants.

4. The method of claim 1 , wherein the key orchestration server uses Message Layer Security protocol for sending and receiving a plurality of encrypted messages.

5. The method of claim 1 , wherein disabling the end-to-end encryption session, comprises:

receiving, from the key orchestration server, a third encrypted message that indicates an additional participant has initiated disabling of the end-to-end encryption session, wherein total participants of the online meeting session comprises the participant and the additional participant;

determining that each participant of the total participants have initiated disabling of the end-to-end encryption session; and

in response to determining that each participant of the total participants have initiated disabling of the end-to-end encryption session, disabling, by the first participant device, the end-to-end encryption session while maintaining the online meeting session.

6. The method of claim 1 , wherein disabling the end-to-end encryption session, comprises: receiving, from the key orchestration server, an additional third encrypted message that

indicates an additional participant has initiated disabling of the end-to-end encryption session, wherein total participants of the online meeting session include the participant, the additional participant, and a particular participant;

waiting for a period of time to receive, from the key orchestration server, a fourth encrypted message indicating that the particular participant has initiated disabling of the end-to-end encryption session;

determining that the period of time has elapsed without receiving the fourth encrypted message; and

in response to determining that the period of time has elapsed, disabling, by the first participant device, the end-to-end encryption session while maintaining the online meeting session.

7. The method of claim 1 , wherein disabling the end-to-end encryption session, comprises:

in response to receiving the second encrypted message, waiting for a period of time; and

at the end of the period of time, disabling, by the first participant device, the end-to-end encryption session while maintaining the online meeting session.

8. The method of claim 1 , wherein the first disable message is a message to disable end-to-end encryption at each participant device of a plurality of participant devices.

9. The method of claim 1 , further comprising:

sending, to a meeting server that is hosting the online meeting session, an unencrypted message to enable a second end-to-end encryption session; and

sending, to the key orchestration server, an initialization message to initialize the second end-to-end encryption session to allow participants of the online meeting session to engage in the second end-to-end encryption session.

10. A non-transitory, computer-readable medium storing a set of instructions for engaging in an online meeting session in which an end-to-end encryption session is enabled, that, when executed by a processor, cause:

determining that a first participant using a first participant device of multiple participant devices connected to the online meeting session has permission to disable end-to-end encryption;

in response to determining that the first participant has the permission to disable end-to-end encryption, sending, by the first participant device to a key orchestration server, a first disable message to disable the end-to-end encryption session, wherein the first disable message is an encrypted message to disable the end-to-end encryption session;

receiving, by the first participant device, a second encrypted message from the key orchestration server indicating that a second participant device, of the multiple participant devices, has initiated disabling of the end-to-end encryption session;

wherein the second encrypted message originated from the second participant device; and

in response to receiving the second encrypted message, disabling, by the first participant device, the end-to-end encryption session while maintaining the online meeting session.

11. The non-transitory, computer-readable medium of claim 10 , wherein the key orchestration server uses Message Layer Security protocol for sending and receiving a plurality of encrypted messages.

12. The non-transitory, computer-readable medium of claim 10 , wherein the non-transitory, computer-readable medium storing further instructions that, when executed by the processor, cause:

receiving, from the key orchestration server, a third encrypted message that indicates an additional participant has initiated disabling of the end-to-end encryption session, wherein total participants of the online meeting session comprise the participant and the additional participant;

determining that each participant of the total participants have initiated disabling of the end-to-end encryption session; and

in response to determining that each participant of the total participants have initiated disabling of the end-to-end encryption session, disabling, by the first participant device, the end-to-end encryption session while maintaining the online meeting session.

13. The non-transitory, computer-readable medium of claim 10 , wherein the first disable message is a message to disable end-to-end encryption at each participant device of a plurality of participant devices.

14. The non-transitory, computer-readable medium of claim 10 , wherein the non-transitory, computer-readable medium storing further instructions that, when executed by the processor, cause:

sending, to a meeting server that is hosting the online meeting session, an unencrypted message to enable a second end-to-end encryption session; and

sending, to the key orchestration server, an initialization message to initialize the second end-to-end encryption session to allow participants of the online meeting session to engage in the second end-to-end encryption session.

15. A network-based system for engaging in an online meeting session in which an end-to-end encryption session is enabled, the system comprising:

a processor;

a memory operatively connected to the processor and storing instructions that, when executed by the processor, cause:

determining that a first participant using a first participant device of multiple participant devices connected to the online meeting session has permission to disable end-to-end encryption;

in response to determining that the first participant has the permission to disable end-to-end encryption, sending, by the first participant device to a key orchestration server, a first disable message to disable the end-to-end encryption session, wherein the first disable message is an encrypted message to disable the end-to-end encryption session;

receiving, by the first participant device, a second encrypted message from the key orchestration server indicating that a second participant device, of the multiple participant devices, has initiated disabling of the end-to-end encryption session;

wherein the second encrypted message originated from the second participant device; and

in response to receiving the second encrypted message, disabling, by the first participant device, the end-to-end encryption session while maintaining the online meeting session.

16. The system of claim 15 , wherein the key orchestration server uses Message Layer Security protocol for sending and receiving a plurality of encrypted messages.

17. The system of claim 15 , wherein the memory storing further instructions that, when executed by the processor, cause:

receiving, from the key orchestration server, a third encrypted message that indicates an additional participant has initiated disabling of the end-to-end encryption session, wherein total participants of the online meeting session comprise the participant and the additional participant; and

determining that each participant of the total participants have initiated disabling of the end-to-end encryption session;

in response to determining that each participant of the total participants have initiated disabling, by the first participant device, of the end-to-end encryption session, disabling the end-to-end encryption session while maintaining the online meeting session.

18. The system of claim 15 , wherein the first disable message is a message to disable end-to-end encryption at each participant device of a plurality of participant devices.

19. The system of claim 15 , wherein the memory storing further instructions that, when executed by the processor, cause:

sending, to a meeting server that is hosting the online meeting session, an unencrypted message to enable a second end-to-end encryption session; and

sending, to the key orchestration server, an initialization message to initialize the second end-to-end encryption session to allow participants of the online meeting session to engage in the second end-to-end encryption session.