Auditable messages with hash chain in instant messaging apps
Instant messaging applications have been used as corporate tools, so the messages exchanged in these systems have been used as negotiation records. However, by design, most of such apps do not provide any verification feature to confirm the integrity of the conversations. Analyses show that it is possible to surreptitiously modify records in popular apps like WhatsApp and Telegram. Aiming this issue, this work proposes a message structure based on hash chain, to ensure the integrity and the possibility to audit conversations. Besides, we propose a design with selective disclosure to improve privacy during audits, and this solution is architecture-independent, so it can be integrated with any instant message app.
Authors
- Marcos A. Simplício (ORCID: https://orcid.org/0000-0001-5227-7165)
- Andrea E. Komo
Institutions
- Universidad San Pedro (PE)
Publication Details
- Published
- 2024-09-16
- DOI
- https://doi.org/10.5753/sbseg_estendido.2024.241723
- Citations
- 1
- Primary Topic
- User Authentication and Security Systems
- Type
- article
- Field-Weighted Citation Impact
- 0.78