Patent ID: 11870917
Assignee: nan
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 7:
8. A system for facilitating policy-compliant end-to-end encryption for individuals between organizations, the system comprising:
a communication device configured for:
receiving a first recipient indication associated with a first recipient of a first tenant from a sender device associated with a sender of a second tenant;
transmitting a master certificate to the sender device, wherein the sender device is configured for encrypting a message associated with the first recipient based on the master certificate, wherein the sender device is configured for transmitting the message to a first recipient device associated with the first recipient;
receiving the message from the first recipient device;
receiving at least one recipient certificate from the first recipient device, wherein the first recipient device comprises the at least one recipient certificate; and
transmitting the message to the first recipient device based on the encrypting, wherein the encrypting further comprises encrypting a session key using the at least one recipient certificate for allowing decryption of the message at the first recipient device;

a storage device configured for:
retrieving a predefined policy definition associated with the first tenant based on the first recipient indication; and
retrieving the master certificate associated with the first tenant is based on an availability being a negative availability; and

a processing device configured for:
identifying the at least one recipient certificate associated with the first recipient based on the predefined policy definition, wherein the identifying comprises searching the at least one recipient certificate in a virtual global address list, wherein the virtual global address list associated with a plurality of certificates, wherein the virtual global address list allows for filtering the at least one recipient certificate from the plurality of certificates based on the predefined policy definition;
generating the availability of the at least one recipient certificate based on the identifying, wherein the availability comprises a positive availability and the negative availability, wherein the plurality of certificates comprises the at least one recipient certificate for the positive availability and the plurality of certificates does not comprise the at least one recipient certificate for the negative availability;
identifying a master key associated with the first tenant based on the message, wherein the first recipient is associated with the first tenant;
decrypting a header of the message based on the master key; and
re-encrypting the header based on the at least one recipient certificate.