Granted Patent B2

US 12,500,869 · App. 18/239,215 · Granted Dec 16, 2025

Inventor: Max Krohn (New York City, NY)

Assignee: Zoom Communications, Inc.

H04L63/0428H04L9/0819H04L65/403H04N7/15

Abstract

Claims (103)

1 . A method, comprising:

generating a first cryptographic key;

outputting a first command, to a video conference provider, to initiate a locked encrypted video conference, including:

a plurality of participants; and

audio and video content encrypted using the first cryptographic key;

distributing the first cryptographic key to each participant of the plurality of participants;

rejecting a first request to admit a first additional participant to the locked encrypted video conference;

generating a second cryptographic key;

distributing the second cryptographic key to each participant of the plurality of participants and the first additional participant; and

outputting a second command, to the video conference provider, to restart the locked encrypted video conference, wherein the restarted locked encrypted video conference includes:

the plurality of participants and the first additional participant; and

the audio and video content encrypted using the second cryptographic key.

2 . The method of claim 1 , wherein:

the first cryptographic key and the second cryptographic key are:

symmetric cryptographic keys; and

distributed using public key cryptography; and

the locked encrypted video conference and the restarted locked encrypted video conference are end-to-end encrypted.

3 . The method of claim 2 , wherein the first cryptographic key and the second cryptographic key are generated using elliptic curves.

4 . The method of claim 1 , wherein initiating the locked encrypted video conference comprises:

receiving a second request to initiate an encrypted video conference; and

locking the encrypted video conference in response to each of the plurality of participants joining the encrypted video conference.

5 . The method of claim 1 , further comprising:

determining that a second additional participant is one of the plurality of participants; and

accepting a second request to admit the second additional participant to the locked encrypted video conference.

6 . The method of claim 1 , wherein the locked encrypted video conference further comprises a host role assigned to a first participant of the plurality of participants, wherein the first participant is a host of the locked encrypted video conference, further comprising:

receiving a second request to reassign the host role to a second participant of the plurality of participants; and

outputting a third command, to the video conference provider, to restart the locked encrypted video conference, wherein the second participant is a host of the restarted locked encrypted video conference.

7 . The method of claim 1 , wherein encrypting the audio and video content using the using the first cryptographic key comprises:

determining one or more streams from the audio and video content, wherein each stream comprises a non-secret stream identifier; and

for each stream of the one or more streams:

generating a stream encryption key using the corresponding non-secret stream identifier; and

encrypting the stream using the corresponding stream encryption key.

8 . The method of claim 1 , wherein rejecting the first request to admit the first additional participant to the locked encrypted video conference comprises:

accessing a participant list including identifiers of the plurality of participants;

verifying the authenticity of the participant list using public key cryptography; and

determining that the first additional participant is not on the participant list.

9 . A system comprising:

a non-transitory computer-readable medium;

a communications interface; and

a processor communicatively coupled to the non-transitory computer-readable medium and the communications interface, the processor configured to execute processor-executable instructions stored in the non-transitory computer-readable medium to:

generate a first cryptographic key;

output a first command, to a video conference provider, to initiate a locked encrypted video conference, including:

a plurality of participants; and

audio and video content encrypted using the first cryptographic key;

distribute the first cryptographic key to each participant of the plurality of participants;

reject a first request to admit a first additional participant to the locked encrypted video conference;

generate a second cryptographic key;

distribute the second cryptographic key to each participant of the plurality of participants and the first additional participant; and

output a second command, to the video conference provider, to restart the locked encrypted video conference, wherein the restarted locked encrypted video conference includes:

the plurality of participants and the first additional participant; and

the audio and video content encrypted using the second cryptographic key.

10 . The system of claim 9 , wherein:

the first cryptographic key and the second cryptographic key are:

symmetric cryptographic keys; and

distributed using public key cryptography;

the locked encrypted video conference and the restarted locked encrypted video conference are end-to-end encrypted; and

the first cryptographic key and the second cryptographic key are generated using elliptic curves.

11 . The system of claim 9 , wherein the instruction to initiate the locked encrypted video conference comprises:

receiving a second request to initiate an encrypted video conference; and

locking the encrypted video conference in response to each of the plurality of participants joining the encrypted video conference.

12 . The system of claim 9 , further comprising instructions to:

determine that a second additional participant is one of the plurality of participants; and

accept a second request to admit the second additional participant to the locked encrypted video conference.

13 . The system of claim 9 , wherein the instruction to encrypt the audio and video content using the using the first cryptographic key comprises:

determining one or more streams from the audio and video content, wherein each stream comprises a non-secret stream identifier; and

for each stream of the one or more streams:

generating a stream encryption key using the corresponding non-secret stream identifier; and

encrypting the stream using the corresponding stream encryption key.

14 . A non-transitory computer-readable medium comprising processor-executable instructions configured to cause one or more processors to:

generate a first cryptographic key;

output a first command, to a video conference provider, to initiate a locked encrypted video conference, including:

a plurality of participants; and

audio and video content encrypted using the first cryptographic key;

distribute the first cryptographic key to each participant of the plurality of participants;

reject a first request to admit a first additional participant to the locked encrypted video conference;

generate a second cryptographic key;

distribute the second cryptographic key to each participant of the plurality of participants and the first additional participant; and

output a second command, to the video conference provider, to restart the locked encrypted video conference, wherein the restarted locked encrypted video conference includes:

the plurality of participants and the first additional participant; and

the audio and video content encrypted using the second cryptographic key.

15 . The non-transitory computer-readable medium of claim 14 , wherein:

the first cryptographic key and the second cryptographic key are:

symmetric cryptographic keys; and

distributed using public key cryptography;

the locked encrypted video conference and the restarted locked encrypted video conference are end-to-end encrypted; and

the first cryptographic key and the second cryptographic key are generated using elliptic curves.

16 . The non-transitory computer-readable medium of claim 14 , wherein the instruction to initiate the locked encrypted video conference comprises:

receiving a second request to initiate an encrypted video conference; and

locking the encrypted video conference in response to each of the plurality of participants joining the encrypted video conference.

17 . The non-transitory computer-readable medium of claim 14 , further comprising instructions to:

determine that a second additional participant is one of the plurality of participants; and accept a second request to admit the second additional participant to the locked encrypted video conference.

18 . The non-transitory computer-readable medium of claim 14 , wherein the locked encrypted video conference further comprises a host role assigned to a first participant of the plurality of participants, wherein the first participant is a host of the locked encrypted video conference, further comprising instructions to:

receive a second request to reassign the host role to a second participant of the plurality of participants; and

output a third command, to the video conference provider, to restart the locked encrypted video conference, wherein the second participant is a host of the restarted locked encrypted video conference.

19 . The non-transitory computer-readable medium of claim 14 , wherein the instruction to encrypt the audio and video content using the using the first cryptographic key comprises:

determining one or more streams from the audio and video content, wherein each stream comprises a non-secret stream identifier; and

for each stream of the one or more streams:

generating a stream encryption key using the corresponding non-secret stream identifier; and

encrypting the stream using the corresponding stream encryption key.

20 . The non-transitory computer-readable medium of claim 14 , wherein the instruction to reject the first request to admit the first additional participant to the locked encrypted video conference comprises:

accessing a participant list including identifiers of the plurality of participants;

verifying the authenticity of the participant list using public key cryptography; and

determining that the first additional participant is not on the participant list.

Assignments (2)

Continuity (3)

References Cited (52)