Abstract: A multi-cluster environment improves the availability and performance of encryption messaging services by providing an in-order cross cluster replication of encryption messages. A first cluster and a second cluster of the multi-cluster environment receive messages with a session identifier for an encrypted session. The first and second clusters replicate the received messages across the multi-cluster environment. A third cluster of the multi-cluster environment detects a particular message from the replicated messages with a timestamp that is earlier than a timestamp of the other replicated messages, and defines a message sequence window with a subset of messages from the replicated messages arranged in an order that differs from an ordering with which the third cluster receives the replicated messages. The third cluster distributes the reordered subset of messages to endpoints of the encrypted session connected via the third cluster.

Abstract: Disclosed is a selective encryption system that selectively encrypts sensitive image data within frames of a video stream and compresses other insensitive image data within the frames in order to generate and distribute a partially encrypted video stream that protects the sensitive image data without the time, energy, resource, and size penalty associated with encrypting all image data in all frames of the video stream. The system parses a video stream image into different regions that each contain different image data. The system detects first regions that contain the sensitive image data, encrypts the sensitive image data in the first regions, and compresses the image data in other second regions without encryption. The system distributes a selectively encrypted frame of the video stream that includes the encrypted image data for the first regions and the compressed image data for second regions.

Abstract: An end-to-end encrypted communication system securely provides session keys for encrypted session history recovery for new members or reconnecting members of an encrypted session. The encrypted session history recovery adapts the end-to-end encryption for secure distribution of the encrypted content and session keys that were exchanged before the members connected to the encrypted session. The system receives encrypted content from a first member of the encrypted session during a first time when the first member is online and a second member of the encrypted session is offline and not connected to the encrypted session. The system detects that the second member comes online and connects to the encrypted session at a second time, and provides the second member with a session key associated with decrypting the encrypted content that was exchanged prior to the second member connecting to the encrypted session.

Abstract: A multi-cluster environment improves the availability and performance of encryption messaging services by providing an in-order cross cluster replication of encryption messages. A first cluster and a second cluster of the multi-cluster environment receive messages with a session identifier for an encrypted session. The first and second clusters replicate the received messages across the multi-cluster environment. A third cluster of the multi-cluster environment detects a particular message from the replicated messages with a timestamp that is earlier than a timestamp of the other replicated messages, and defines a message sequence window with a subset of messages from the replicated messages arranged in an order that differs from an ordering with which the third cluster receives the replicated messages. The third cluster distributes the reordered subset of messages to endpoints of the encrypted session connected via the third cluster.

Abstract: An end-to-end encrypted communication system securely provides session keys for encrypted session history recovery for new members or reconnecting members of an encrypted session. The encrypted session history recovery adapts the end-to-end encryption for secure distribution of the encrypted content and session keys that were exchanged before the members connected to the encrypted session. The system receives encrypted content from a first member of the encrypted session during a first time when the first member is online and a second member of the encrypted session is offline and not connected to the encrypted session. The system detects that the second member comes online and connects to the encrypted session at a second time, and provides the second member with a session key associated with decrypting the encrypted content that was exchanged prior to the second member connecting to the encrypted session.

Abstract: A computer-implemented method for dynamically disabling an end-to-end encryption session within an online meeting session is provided. The method comprises engaging in an online meeting session in which an end-to-end encryption session is enabled. The method further comprises sending, to a key orchestration server, a first encrypted message in which the contents of the first encrypted message are instructions to disable the end-to-end encryption session. The method further comprises receiving, from the key orchestration server, a second encrypted message that indicates that a participant has initiated disabling of the end-to-end encryption session. In response to receiving the second encrypted message disabling the end-to-end encryption session while maintaining the online meeting session.

Abstract: An end-to-end encrypted communication system securely provides session keys for encrypted session history recovery for new members or reconnecting members of an encrypted session. The encrypted session history recovery adapts the end-to-end encryption for secure distribution of the encrypted content and session keys that were exchanged before the members connected to the encrypted session. The system receives encrypted content from a first member of the encrypted session during a first time when the first member is online and a second member of the encrypted session is offline and not connected to the encrypted session. The system detects that the second member comes online and connects to the encrypted session at a second time, and provides the second member with a session key associated with decrypting the encrypted content that was exchanged prior to the second member connecting to the encrypted session.

Abstract: A computer-implemented method for dynamically disabling an end-to-end encryption session within an online meeting session is provided. The method comprises engaging in an online meeting session in which an end-to-end encryption session is enabled. The method further comprises sending, to a key orchestration server, a first encrypted message in which the contents of the first encrypted message are instructions to disable the end-to-end encryption session. The method further comprises receiving, from the key orchestration server, a second encrypted message that indicates that a participant has initiated disabling of the end-to-end encryption session. In response to receiving the second encrypted message disabling the end-to-end encryption session while maintaining the online meeting session.

Abstract: A multi-cluster environment improves the availability and performance of encryption messaging services by providing an in-order cross cluster replication of encryption messages. A first cluster and a second cluster of the multi-cluster environment receive messages with a session identifier for an encrypted session. The first and second clusters replicate the received messages across the multi-cluster environment. A third cluster of the multi-cluster environment detects a particular message from the replicated messages with a timestamp that is earlier than a timestamp of the other replicated messages, and defines a message sequence window with a subset of messages from the replicated messages arranged in an order that differs from an ordering with which the third cluster receives the replicated messages. The third cluster distributes the reordered subset of messages to endpoints of the encrypted session connected via the third cluster.

Abstract: A computer implemented method of applying a unified search for a match of one or more features in a plurality of encrypted records, comprising using one or more processors of a server associated with a database comprising a plurality of encrypted records. The processor(s) is adapted for receiving a query for searching one or more plaintext features in the plurality of encrypted, searching for a match of the one or more plaintext features using a first search methodology and a second search methodology and outputting an indication of matching encrypted records according to the match. Wherein the second search methodology is asymptotically faster than the first search methodology and wherein the first search methodology is used for searching a subset of the plurality of encrypted records selected based on status indication associated with each encrypted record.

Abstract: A computer-implemented method of generating and distributing keys includes generating, based on a master key, a keyset, wherein the keyset comprises a re-encryption key, generating a key distribution request comprising the keyset, encrypting the keyset using an inbox key associated with a client device to generate an encrypted keyset, sending the re-encryption key to a key manager, and causing to distribute the encrypted keyset to the client device.

Abstract: Disclosed is a selective encryption system that selectively encrypts sensitive image data within frames of a video stream and compresses other insensitive image data within the frames in order to generate and distribute a partially encrypted video stream that protects the sensitive image data without the time, energy, resource, and size penalty associated with encrypting all image data in all frames of the video stream. The system parses a video stream image into different regions that each contain different image data. The system detects first regions that contain the sensitive image data, encrypts the sensitive image data in the first regions, and compresses the image data in other second regions without encryption. The system distributes a selectively encrypted frame of the video stream that includes the encrypted image data for the first regions and the compressed image data for second regions.

Abstract: A computer-implemented method for dynamically disabling an end-to-end encryption session within an online meeting session is provided. The method comprises engaging in an online meeting session in which an end-to-end encryption session is enabled. The method further comprises sending, to a key orchestration server, a first encrypted message in which the contents of the first encrypted message are instructions to disable the end-to-end encryption session. The method further comprises receiving, from the key orchestration server, a second encrypted message that indicates that a participant has initiated disabling of the end-to-end encryption session. In response to receiving the second encrypted message disabling the end-to-end encryption session while maintaining the online meeting session.

Abstract: A computer implemented method of applying a unified search for a match of one or more features in a plurality of encrypted records, comprising using one or more processors of a server associated with a database comprising a plurality of encrypted records. The processor(s) is adapted for receiving a query for searching one or more plaintext features in the plurality of encrypted, searching for a match of the one or more plaintext features using a first search methodology and a second search methodology and outputting an indication of matching encrypted records according to the match. Wherein the second search methodology is asymptotically faster than the first search methodology and wherein the first search methodology is used for searching a subset of the plurality of encrypted records selected based on status indication associated with each encrypted record.

Abstract: A computer implemented method of applying a unified search for a match of one or more features in a plurality of encrypted records, comprising using one or more processors of a server associated with a database comprising a plurality of encrypted records. The processor(s) is adapted for receiving a query for searching one or more plaintext features in the plurality of encrypted, searching for a match of the one or more plaintext features using a first search methodology and a second search methodology and outputting an indication of matching encrypted records according to the match. Wherein the second search methodology is asymptotically faster than the first search methodology and wherein the first search methodology is used for searching a subset of the plurality of encrypted records selected based on status indication associated with each encrypted record.

Abstract: A computer implemented method of applying a unified search for a match of one or more features in a plurality of encrypted records, comprising using one or more processors of a server associated with a database comprising a plurality of encrypted records. The processor(s) is adapted for receiving a query for searching one or more plaintext features in the plurality of encrypted, searching for a match of the one or more plaintext features using a first search methodology and a second search methodology and outputting an indication of matching encrypted records according to the match. Wherein the second search methodology is asymptotically faster than the first search methodology and wherein the first search methodology is used for searching a subset of the plurality of encrypted records selected based on status indication associated with each encrypted record.