Patent ID: 11870917
Assignee: nan
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method for facilitating policy-compliant end-to-end encryption for individuals between organizations, the method comprising:
receiving, using a communication device, a first recipient indication associated with a first recipient of a first tenant from a sender device associated with a sender of a second tenant;
retrieving, using a storage device, a predefined policy definition associated with the first tenant based on the first recipient indication;
identifying, using a processing device, at least one recipient certificate associated with the first recipient based on the predefined policy definition, wherein the identifying comprises searching the at least one recipient certificate in a virtual global address list, wherein the virtual global address list associated with a plurality of certificates, wherein the virtual global address list allows for filtering the at least one recipient certificate from the plurality of certificates based on the predefined policy definition;
generating, using the processing device, an availability of the at least one recipient certificate based on the identifying, wherein the availability comprises a positive availability and a negative availability, wherein the plurality of certificates comprises the at least one recipient certificate for the positive availability and the plurality of certificates does not comprise the at least one recipient certificate for the negative availability;
retrieving, using the storage device, the at least one recipient certificate associated with the first recipient based on the a master certificate associated with the first tenant is based on the availability being the negative availability;
transmitting, using the communication device, the master certificate to the sender device, wherein the sender device is configured for encrypting a message associated with the first recipient based on the master certificate, wherein the sender device is configured for transmitting the message to a first recipient device associated with the first recipient;
receiving, using the communication device, the message from the first recipient device;
identifying, using the processing device, a master key associated with the first tenant based on the message, wherein the first recipient is associated with the first tenant;
decrypting, using the processing device, a header of the message based on the master key;
receiving, using the communication device, the at least one recipient certificate from the first recipient device, wherein the first recipient device comprises the at least one recipient certificate;
re-encrypting, using the processing device, the header based on the at least one recipient certificate; and
transmitting, using the communication device, the message to the first recipient device based on the encrypting, wherein the encrypting further comprises encrypting a session key using the at least one recipient certificate for allowing decryption of the message at the first recipient device.