Granted Patent B2

US 12,542,681 · App. 19/261,587 · Granted Feb 3, 2026

Inventors: Paul Dillon (Erie, PA); Kyle Bebee (Kalispell, MT); Damien Fortune (Savannah, GA); Robert Wilson (Reno, NV)

Assignee: Sentriqs, Inc.

H04L9/3247H04L9/0822H04L9/0861

Abstract

Claims (96)

1 . One or more non-transitory computer-readable media with instructions stored thereon that when executed by one or more processors cause the one or more processors to:

receive, using an application executed within a web browser, an input comprising a message from a user addressed to a group, wherein the user is a member of the group;

retrieve, from web browser storage, a first key generation secret that was generated by a key generation algorithm for the user, wherein the key generation algorithm generates, using a key generation secret, a new key generation secret and a new encryption key for message encryption;

receive, from the key generation algorithm based on inputting the first key generation secret, a second key generation secret and a first encryption key;

encrypt the message using the first encryption key into an encrypted message;

store, within the web browser storage, the second key generation secret, wherein the second key generation secret is stored in association with the user;

generate an encrypted message object, wherein the encrypted message object comprises an encrypted message and message metadata;

encode the encrypted message object into one or more transport representations;

generate a hypertext transport protocol request for each transport representation of the one or more transport representations; and

transmit each hypertext transport protocol request to a server.

2 . The one or more non-transitory computer-readable media of claim 1 , wherein the instructions for retrieving, from the web browser storage, the first key generation secret generated by the key generation algorithm further cause the one or more processors to:

access, within the web browser storage, a binary tree associated with the group; and

retrieve the first key generation secret from the binary tree within the web browser storage.

3 . The one or more non-transitory computer-readable media of claim 2 , wherein the instructions further cause the one or more processors to:

retrieve the binary tree from the web browser storage; and

decrypt the binary tree.

4 . The one or more non-transitory computer-readable media of claim 3 , wherein the instructions for storing, within the web browser storage, the second key generation secret further cause the one or more processors to:

locate, within the binary tree retrieved from the web browser storage, a leaf node associated with the user; and

replace, within the binary tree in the web browser storage, the first key generation secret with the second key generation secret.

5 . The one or more non-transitory computer-readable media of claim 1 , wherein the instructions for generating the encrypted message object further cause the one or more processors to:

retrieve a sender identifier and a group identifier from the web browser storage; and

encrypt the encrypted message, the sender identifier, and the group identifier into the encrypted message object.

6 . The one or more non-transitory computer-readable media of claim 1 , wherein the instructions further cause the one or more processors to:

access, within the web browser storage, an encrypted binary tree that stores (1) a plurality of user identifiers of a plurality of users associated with the group and (2) a plurality of key generation secrets, wherein each key generation secret of the plurality of key generation secrets is a last generated key generation secret for a corresponding user;

decrypt the encrypted binary tree into a data structure representing a binary tree;

replace, within a leaf node associated with the user, the first key generation secret with the second key generation secret;

encrypt an updated binary tree; and

store the updated binary tree in the web browser storage.

7 . The one or more non-transitory computer-readable media of claim 1 , wherein the instructions further cause the one or more processors to:

receive a second message generated by a second user within the group, wherein the second message comprises a second identifier of the second user;

locate, within a binary tree stored in the web browser storage and based on the second identifier, a second leaf representing the second user, wherein the binary tree stores (1) a plurality of user identifiers of a plurality of users with the group and (2) a plurality of key generation secrets, wherein each key generation secret of the plurality of key generation secrets is a last generated key generation secret for a corresponding user;

retrieve, from the second leaf, a latest key generation secret associated with the second user; and

generate, using the key generation algorithm, a subsequent key generation secret and a subsequent decryption key, wherein the subsequent key generation secret and the subsequent decryption key were separately generated on a device of the second user, and wherein the subsequent decryption key was used to encrypt the second message on the device of the second user.

8 . A method for encrypting messages, the method comprising:

receiving, using an application executed within a web browser, an input comprising a message from a user addressed to a group, wherein the user is a member of the group;

retrieving, from web browser storage, a first key generation secret that was generated by a key generation algorithm for the user, wherein the key generation algorithm generates, using a key generation secret, a new key generation secret and a new encryption key for message encryption;

receive, from the key generation algorithm based on inputting the first key generation secret, a second key generation secret and a first encryption key;

encrypting the message using the first encryption key into an encrypted message;

storing, within the web browser storage, the second key generation secret, wherein the second key generation secret is stored in association with the user;

generating an encrypted message object, wherein the encrypted message object comprises an encrypted message and message metadata;

encoding the encrypted message object into one or more transport representations;

generating a hypertext transport protocol request for each transport representation of the one or more transport representations; and

transmitting each hypertext transport protocol request to a server.

9 . The method of claim 8 , wherein retrieving, from the web browser storage, the first key generation secret generated by the key generation algorithm further comprises:

accessing, within the web browser storage, a binary tree associated with the group; and

retrieving the first key generation secret from the binary tree within the web browser storage.

10 . The method of claim 9 , wherein further comprising:

retrieving the binary tree from the web browser storage; and

decrypting the binary tree.

11 . The method of claim 10 , wherein storing, within the web browser storage, the second key generation secret further comprises:

locating, within the binary tree retrieved from the web browser storage, a leaf node associated with the user; and

replacing, within the binary tree in the web browser storage, the first key generation secret with the second key generation secret.

12 . The method of claim 8 , wherein generating the encrypted message object further comprises:

retrieving a sender identifier and a group identifier from the web browser storage; and

encrypting the encrypted message, the sender identifier, and the group identifier into the encrypted message object.

13 . The method of claim 8 , further comprising:

accessing, within the web browser storage, an encrypted binary tree that stores (1) a plurality of user identifiers of a plurality of users associated with the group and (2) a plurality of key generation secrets, wherein each key generation secret of the plurality of key generation secrets is a last generated key generation secret for a corresponding user;

decrypting the encrypted binary tree into a data structure representing a binary tree;

replacing, within a leaf node associated with the user, the first key generation secret with the second key generation secret;

encrypting an updated binary tree; and

storing the updated binary tree in the web browser storage.

14 . The method of claim 8 , further comprising:

receiving a second message generated by a second user within the group, wherein the second message comprises a second identifier of the second user;

locating, within a binary tree stored in the web browser storage and based on the second identifier, a second leaf representing the second user, wherein the binary tree stores (1) a plurality of user identifiers of a plurality of users with the group and (2) a plurality of key generation secrets, wherein each key generation secret of the plurality of key generation secrets is a last generated key generation secret for a corresponding user;

retrieving, from the second leaf, a latest key generation secret associated with the second user; and

generating, using the key generation algorithm, a subsequent key generation secret and a subsequent decryption key, wherein the subsequent key generation secret and the subsequent decryption key were separately generated on a device of the second user, and wherein the subsequent decryption key was used to encrypt the second message on the device of the second user.

15 . A system comprising:

one or more processors; and

one or more non-transitory computer-readable media with instructions stored thereon that when executed by the one or more processors cause the one or more processors to:

receive, using an application executed within a web browser, an input comprising a message from a user addressed to a group, wherein the user is a member of the group;

retrieve, from web browser storage, a first key generation secret that was generated by a key generation algorithm for the user, wherein the key generation algorithm generates, using a key generation secret, a new key generation secret and a new encryption key for message encryption;

receive, from the key generation algorithm based on inputting the first key generation secret, a second key generation secret and a first encryption key;

encrypt the message using the first encryption key into an encrypted message;

store, within the web browser storage, the second key generation secret, wherein the second key generation secret is stored in association with the user;

generate an encrypted message object, wherein the encrypted message object comprises an encrypted message and message metadata;

encode the encrypted message object into one or more transport representations;

generate a hypertext transport protocol request for each transport representation of the one or more transport representations; and

transmit each hypertext transport protocol request to a server.

16 . The system of claim 15 , wherein the instructions for retrieving, from the web browser storage, the first key generation secret generated by the key generation algorithm further cause the one or more processors to:

access, within the web browser storage, a binary tree associated with the group; and

retrieve the first key generation secret from the binary tree within the web browser storage.

17 . The system of claim 16 , wherein the instructions further cause the one or more processors to:

retrieve the binary tree from the web browser storage; and

decrypt the binary tree.

18 . The system of claim 17 , wherein the instructions for storing, within the web browser storage, the second key generation secret further cause the one or more processors to:

locate, within the binary tree retrieved from the web browser storage, a leaf node associated with the user; and

replace, within the binary tree in the web browser storage, the first key generation secret with the second key generation secret.

19 . The system of claim 15 , wherein the instructions for generating the encrypted message object further cause the one or more processors to:

retrieve a sender identifier and a group identifier from the web browser storage; and

encrypt the encrypted message, the sender identifier, and the group identifier into the encrypted message object.

20 . The system of claim 15 , wherein the instructions further cause the one or more processors to:

access, within the web browser storage, an encrypted binary tree that stores (1) a plurality of user identifiers of a plurality of users associated with the group and (2) a plurality of key generation secrets, wherein each key generation secret of the plurality of key generation secrets is a last generated key generation secret for a corresponding user;

decrypt the encrypted binary tree into a data structure representing a binary tree;

replace, within a leaf node associated with the user, the first key generation secret with the second key generation secret;

encrypt an updated binary tree; and

store the updated binary tree in the web browser storage.

Assignments (2)

Continuity (4)

References Cited (12)