Secure instant messaging system

摘要

A secure instant messaging (IM) system integrates secure instant messaging into existing instant messaging systems. A certificate authority (CA) issues security certificates to users binding the user's IM screen name to a public key, used by sending users to encrypt messages and files for the user. The CA uses a subscriber database to keep track of valid users and associated information, e.g. user screen names, user subscription expiration dates, and enrollment agent information. A user sends his certificate to an instant messaging server which publishes the user's certificate to other users. Users encrypt instant messages and files using an encryption algorithm and the recipient's certificate. A sending user can sign instant messages using his private signing key. The security status of received messages is displayed to recipients.

主权项

1. A process of facilitating the exchange of secure data via an instant messaging system comprising the steps of:
receiving a certificate, wherein the certificate is issued to a first user and associated with the first user's screen name; wherein the certificate includes a public key; responsive to receiving the certificate, determining based on the first user's screen name, a list of preferred users associated with the first user's screen name; sending the certificate to a second IM client that is associated with a second user on the list of preferred users; receiving an encrypted IM message from the second IM client, wherein the encrypted IM message is encrypted using the public key included in the certificate; sending the encrypted IM message to a first IM client associated with the first user.