Cryptographic trust system for electronic communications integrity using tuple spaces and messaging user agents
An electronic communication system for certification of an electronic communication includes: (1) a cryptographic trust server (CTS); (2) a common memory to store electronic communications; (3) a tuple server configured to generate tuple spaces; (4) a first user device; and (5) a first messaging user agent (MUA) associated with the first user device. The first MUA is configured to generate an MUA cryptographic hash for a first electronic communication, and the MUA places the first electronic communication with the cryptographic hash in the common memory, optionally with an iterative communication thread of prior electronic communications. The first MUA places an alert and the location of the first electronic communication in a tuple space provided by the tuple server. The alert notifies the CTS to access the common memory to review and verify or not verify the MUA cryptographic hash and optionally verify or not verify a CTS hash of the iterative communication thread.
1 . An electronic communication system configured to certify an iterative electronic communication thread, wherein the system comprises:
a cryptographic trust server (CTS) configured to validate the iterative electronic communication thread;
a tuple server configured to generate tuple spaces that are in communication with the CTS;
a common memory in communication with the CTS, the common memory being configured to store electronic communications;
a first user device associated with a first user, wherein the first user device is configured to facilitate the creation of a first electronic communication by the first user; and
a first messaging user agent (MUA) associated with and in communication with (a) the first user device, (b) a first tuple space generated by the tuple server, and (c) the common memory, wherein the first MUA is configured to (d) generate an MUA cryptographic hash for the first electronic communication utilizing a private key of the first MUA, (e) transmit the iterative electronic communication thread including the first electronic communication with the MUA cryptographic hash to the common memory, and (f) place in the first tuple space (i) an MUA alert indicating that the iterative electronic communication including the first electronic communication has been added to the common memory, and (ii) the location in the common memory where the first electronic communication is located;
wherein the CTS, in response to the MUA alert, is configured to access the common memory and either (a) verifies the authenticity of (i) a CTS hash that the CTS previously placed on the iterative electronic communication thread prior to the first electronic communication being added, and (ii) the MUA cryptographic hash for the first electronic communication, and (iii) places a new CTS hash on the iterative electronic communication thread including the first electronic communication, or (b) does not verify the authenticity of (i) the CTS hash that the CTS previously placed on the iterative electronic communication thread prior to the first electronic communication being added, or (ii) the MUA cryptographic hash for the first electronic communication, and (iii) does not place the new CTS hash on the iterative electronic communication thread including the first electronic communication; and
if the authenticity of the iterative electronic communication thread including the first electronic communication is verified, the CTS is further configured to (a) place a first CTS alert in the tuple space to indicate same to the first MUA, or (b) place a second CTS alert in a second tuple space to indicate same to a second MUA.
2 . The electronic communication system of claim 1 , wherein the first MUA digitally signs the first electronic communication if it is verified by the CTS.
3 . The electronic communication system of claim 1 , wherein the MUA is further configured to transmit to the tuple space a thread identifier and the location in the common memory of each contribution to the iterative electronic communication thread, and the CTS either (a) verifies the authenticity of each contribution in the iterative electronic communication thread, places the CTS hash on the iterative electronic communication thread, and permits it to be received and opened by another user device, or (b) does not verify the authenticity of the iterative electronic communication thread, does not place the CTS hash on the iterative electronic communication thread, and does not permit it to be received and opened by another user device.
4 . The electronic communication system of claim 1 , wherein if the CTS places the first CTS alert in the tuple space, the first MUA receives the CTS hash and is configured to permit the iterative electronic communication thread including the first electronic communication to be (a) sent to, and (b) opened by another user device.
5 . The electronic communication system of claim 1 , wherein the iterative electronic communication thread including the first electronic communication is sent to a second user device in communication with the second MUA, the tuple server generates a second tuple space, the CTS places the second CTS alert in the second tuple space, and the second MUA receives the second CTS alert and permits the second user device to receive and open the iterative electronic communication thread including the first electronic communication.
6 . The electronic communication system of claim 1 , wherein the first MUA is further configured to place a digital signature on the first electronic communication if the MUA cryptographic hash is verified by the CTS.
7 . The electronic communication system of claim 1 that further comprises a second client device configured to receive the iterative electronic communication thread including the first electronic communication, wherein the second client device is in communication with the second MUA, wherein the second MUA is configured to query the CTS before permitting the second client device to receive the iterative electronic communication thread including the first electronic communication by placing a second MUA alert in the second tuple space to cause the CTS to authenticate the MUA cryptographic hash and the CTS hash.
8 . The electronic communication system of claim 7 , wherein the second MUA is further configured to add a start marker and an end marker to the first electronic communication.
9 . The electronic communication system of claim 1 , wherein the iterative electronic communication thread is an email thread, and the system further includes an email server in communication with the first client device.
10 . The electronic communication system of claim 1 , wherein the first MUA is a plugin of the first client device.
11 . A computer method of certifying electronic communications within an iterative electronic communication thread, wherein the method comprises the steps of:
using a first user device associated with a first user, creating a first electronic communication;
generating a first tuple space using a tuple server;
using a first MUA in communication with the first user device and in communication with the first tuple space, generating an MUA cryptographic hash for the first electronic communication using a private key of the first MUA, and placing the iterative electronic communication thread including the first electronic communication with the cryptographic hash into a common memory, and placing an alert in the first tuple space, wherein the alert notifies a CTS of the presence of the first electronic communication in the common memory; and
in response to the alert, the CTS verifying the authenticity of (i) a CTS hash placed on the iterative electronic communication thread prior to the first electronic communication being added, and (ii) the MUA cryptographic hash for the first electronic communication, and (iii) placing a new CTS hash on the iterative electronic communication thread including the first electronic communication or not verifying (i) the CTS hash previously placed on the iterative electronic communication thread prior to the first electronic communication being added, or (ii) the MUA cryptographic hash for the first electronic communication, and (iii) not placing the new CTS hash on the iterative electronic communication thread including the first electronic communication.
12 . The computer method of claim 11 that further comprises the step of the first MUA placing in the first tuple space the location of the first electronic communication in the common memory.
13 . The computer method of certifying electronic communications within an iterative electronic communication thread of claim 12 , wherein the CTS either (a) verifies the authenticity of the MUA cryptographic hash, places a CTS hash on the first electronic communication and permits the first electronic communication to be received and opened by another user device, or (b) does not verify the authenticity of the MUA cryptographic hash, does not place the CTS hash on the first electronic communication, and does not permit it to be received and opened by another user device.
14 . The computer method of certifying electronic communications within an iterative electronic communication thread of claim 12 that further includes the steps of the CTS (a) verifying the authenticity of each contribution in the iterative electronic communication thread by reviewing a first CTS hash and the MUA cryptographic hash, and placing a second CTS hash on the iterative electronic communication thread including the first electronic communication, and permitting it to be received and opened by another user device, or (b) not verifying the authenticity of each contribution in the iterative electronic communication thread including the first electronic communication, not placing the second CTS hash on the iterative electronic communication thread including the first electronic communication, and not permitting it to be received and opened by another user device.
15 . The computer method of certifying electronic communications within an iterative electronic communication thread of claim 12 that further includes the step of one or more of the first MUA and the CTS alerting one or more of the first user device, another MUA, another user device, and a system administrator if an electronic communication is not authenticated by the CTS.
16 . The computer method of certifying electronic communications within an iterative electronic communication thread of claim 12 that further includes the step of the first MUA adding a thread identifier and a location within the common memory for each electronic communication within the iterative electronic communication thread into the first tuple space to assist the CTS in verifying the authenticity of each electronic communication within the iterative electronic communication thread.
17 . The computer method of certifying electronic communications within an iterative electronic communication thread of claim 15 that further includes the step of storing in the common memory the first electronic communication thread MUA cryptographic hash.
18 . A method of certifying iterative electronic communications in an iterative electronic communication thread that comprises the steps of:
a first MUA identifying a first electronic communication created by a first user device, wherein the first electronic communication is added to the iterative electronic communication thread;
the first MUA placing an MUA cryptographic hash on the first electronic communication and placing the iterative electronic communication thread including the first electronic communication into a common memory;
the first MUA placing an alert in a first tuple space generated by a tuple server, wherein the first tuple space is in communication with a CTS, wherein the CTS reviews the MUA cryptographic hash in the common memory;
the CTS either verifying or rejecting the first electronic communication based on the information in the MUA cryptographic hash and communicating the verification or rejection to the first MUA via the first tuple space; and
the MUA transmitting the iterative electronic communication thread including the first electronic communication if the first electronic communication is verified by the CTS and blocking transmission if the first electronic communication is rejected by the CTS.
19 . The computer method of certifying iterative electronic communications in an iterative electronic communication thread of claim 18 that further comprises the steps of:
receiving, on a second user device in communication with a second MUA, the iterative electronic communication thread including the first electronic communication;
the second MUA transmitting the iterative electronic communication thread including the first electronic communication to the common memory, and placing a second alert in a second tuple space generated by the tuple server, wherein the second alert notifies the CTS to review the MUA cryptographic hash of the first electronic communication; and
the CTS examining and (a) verifying the authenticity of the MUA cryptographic hash and permitting the first electronic communication to be opened by the second user device, or (b) not verifying the authenticity of the MUA cryptographic hash, and not permitting the first electronic communication to be opened by the second user device.
20 . The computer method of certifying iterative electronic communications in an iterative electronic communication thread of claim 18 that further includes the steps of the CTS (a) verifying the authenticity of each contribution to the iterative electronic communication thread including the first electronic communication, placing a CTS hash on the iterative electronic communication thread including the first electronic communication, and permitting the iterative electronic communication thread including the first electronic communication, to be received and opened by another user device, or (b) not verifying the authenticity of the iterative electronic communication thread including the first electronic communication, not placing the CTS hash on the iterative electronic communication thread including the first electronic communication, and not permitting the iterative electronic communication thread including the first electronic communication, to be received and opened by another user device.