Granted Patent B2

US 12,335,659 · App. 18/527,885 · Granted Jun 17, 2025

Inventor: Karan Lyons (Los Angeles, CA)

Assignee: Zoom Communications, Inc.

H04N7/155G06F21/31G06F21/6245G06F21/64H04L9/0866H04L9/3236H04L9/3247G06F2221/2101H04L9/50H04L2209/16

Abstract

Claims (79)

1. A method comprising:

receiving identification information associated with a new user device, the new user device associated with the user;

accessing a signature chain associated with the user, the signature chain comprising one or more sequential records;

receiving user personal information associated with the new user device;

generating an obfuscated representation of the user personal information based on the user personal information and a seed value;

generating a cryptographic identifier based on a prior record and the obfuscated representation of the user personal information;

generating a new sequential record for the signature chain based on the obfuscated user personal information, a cryptographic signature, the identification information, and the cryptographic identifier;

adding the new sequential record to the signature chain;

associating the seed value with a user account associated with the user;

receiving a request to join a video conference, the request identifying the new user device and the user; and

authenticating the user based on the new sequential record.

2. The method of claim 1 , further comprising:

receiving a request to delete personal information from the record;

accessing the record; and

deleting the personal information from the record.

3. The method of claim 2 , wherein the authenticating the user based on the record occurs after deleting the personal information from the record.

4. The method of claim 1 , further comprising:

generating a second record comprising second identification information associated with a second user device, a second cryptographic signature based on second cryptographic keys associated with the second user device, and a second cryptographic identifier based on (i) the second identification information, (ii) the second cryptographic signature, and (iii) the record.

5. The method of claim 4 , wherein generating the second cryptographic identifier comprises using a cryptographic hashing function on the second identification information, the second cryptographic signature, and the cryptographic identifier of the record.

6. The method of claim 4 , further comprising, after generating the second record:

receiving a request to delete personal information from the record;

accessing the record;

deleting the personal information from the record; and

after deleting the personal information from the record, verifying the integrity of the second record based on the second cryptographic identifier.

7. The method of claim 1 , wherein generating the obfuscated representation of the user personal information comprises using a cryptographic hashing function on the user personal information.

8. The method of claim 7 , wherein generating the obfuscated representation of the user personal information further comprises using a cryptographic hashing function on the user personal information and a random numeric value.

9. A system comprising:

a communications interface;

a non-transitory computer-readable medium; and

one or more processors communicatively coupled to the communications interface and the non-transitory computer-readable medium, the one or more processors configured to execute processor-executable instructions stored in the non-transitory computer-readable medium to:

receive identification information associated with a new user device, the new user device associated with the user;

access a signature chain associated with the user, the signature chain comprising one or more sequential records;

receive user personal information associated with the new user device;

generate an obfuscated representation of the user personal information based on the user personal information and a seed value;

generate a cryptographic identifier based on a prior record and the obfuscated representation of the user personal information;

generate a new sequential record for the signature chain based on the obfuscated user personal information, a cryptographic signature, the identification information, and the cryptographic identifier;

add the new sequential record to the signature chain;

associate the seed value with a user account associated with the user;

receive a request to join a video conference, the request identifying the new user device and the user; and

authenticate the user based on the new sequential record.

10. The system of claim 9 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to:

receive a request to delete personal information from the record;

access the record; and

delete the personal information from the record.

11. The system of claim 10 , wherein the authenticating the user based on the record occurs after deleting the personal information from the record.

12. The system of claim 9 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to:

generate a second record comprising second identification information associated with a second user device, a second cryptographic signature based on second cryptographic keys associated with the second user device, and a second cryptographic identifier based on (i) the second identification information, (ii) the second cryptographic signature, and (iii) the record.

13. The system of claim 12 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to use a cryptographic hashing function on the second identification information, the second cryptographic signature, and the cryptographic identifier of the record.

14. The system of claim 12 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to, after generating the second record:

receive a request to delete personal information from the record;

access the record;

delete the personal information from the record; and

after deleting the personal information from the record, verify the integrity of the second record based on the second cryptographic identifier.

15. The system of claim 9 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to use a cryptographic hashing function on the user personal information.

16. The system of claim 15 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to use a cryptographic hashing function on the user personal information and a random numeric value.

17. A non-transitory computer-readable medium, comprising processor-executable instructions configured to cause one or more processors to:

receive identification information associated with a new user device, the new user device associated with the user;

access a signature chain associated with the user, the signature chain comprising one or more sequential records;

receive user personal information associated with the new user device;

generate an obfuscated representation of the user personal information based on the user personal information and a seed value;

generate a cryptographic identifier based on a prior record and the obfuscated representation of the user personal information;

generate a new sequential record for the signature chain based on the obfuscated user personal information, a cryptographic signature, the identification information, and the cryptographic identifier;

add the new sequential record to the signature chain;

associate the seed value with a user account associated with the user;

receive a request to join a video conference, the request identifying the new user device and the user; and

authenticate the user based on the new sequential record.

18. The non-transitory computer-readable medium of claim 17 , further comprising processor-executable instructions configured to cause the one or more processors to:

receive a request to delete personal information from the record;

access the record;

delete the personal information from the record; and

wherein the authenticating the user based on the record occurs after deleting the personal information from the record.

19. The non-transitory computer-readable medium of claim 17 , further comprising processor-executable instructions configured to cause the one or more processors to:

generate a second record comprising second identification information associated with a second user device, a second cryptographic signature based on second cryptographic keys associated with the second user device, and a second cryptographic identifier based on (i) the second identification information, (ii) the second cryptographic signature, and (iii) the record

after generate the second record:

receive a request to delete personal information from the record;

access the record;

delete the personal information from the record; and

after deleting the personal information from the record, verify the integrity of the second record based on the second cryptographic identifier.

20. The non-transitory computer-readable medium of claim 19 , wherein generating the second cryptographic identifier comprises using a cryptographic hashing function on the second identification information, the second cryptographic signature, and the cryptographic identifier of the record.

Assignments (2)

Continuity (2)

References Cited (12)