Pandora Messaging: An Enhanced Self-Message-Destructing Secure Instant Messaging Architecture for Mobile Devices

摘要

We propose the Pandora Messaging, an enhanced secure instant messaging architecture which is equipped with a self-message-destructing feature for sensitive personal information applications in a mobile environment. We design the Pandora Message Encryption and Exchange Scheme and the format of a self-destructible message to show how to exchange these messages atop the existing instant messaging service architecture (in this case, XMPP). The Pandora Messaging-based system enables senders to set time, frequency, and location constraints. These conditions determine when the transmitted messages should be destructed and thus become unreadable for receivers. The Pandora Messaging-based system securely sends self-destructible messages to receivers in a way that it uses ephemeral keys to encrypt the messages and transmits the encrypted messages to the designated receivers via the XMPP instant messaging service in real time. When the transmitted messages' constraints are satisfied, the ephemeral key used for encryption will be deleted. Thus, the encrypted messages become unrecoverable. We have implemented a simple messenger application on the Android platform and have evaluated its performance to show that our proposed Pandora Messaging architecture is practical and feasible for sensitive personal information communication on mobile devices.