Qiew Security

SECURITY ARCHITECTURE …

Qiew provides secure messaging for organizations that need to communicate important information to their most important customers, subscribers, members, and others.

Qiew's technology fundamentally differs from conventional secure messaging, which encrypts a message, sends it, and decrypts it at the receiving end.

Qiew does not transmit a message. Instead the sender sends a code that is transformed into information that tells the receiving end where to find various parts of a message.

Those parts may be images, blocks or tables of text, or elements of web pages (public or private). The parts are assembled on the receiving phone individually and arranged in layout, like a web page.

SECURITY BENEFITS …

The benefits of this approach are:

1. Qiew is fast

There is no encryption and decryption at either end.

The message consists of fewer bytes.

The elements of the message are downloaded simultaneously.

2. Qiew is secure

The code of a Qiew message is sent to the unique phone number of the receiver using SMS

Only the smartphone with that number can request the location information of the message elements

If the link to the location information is destroyed the message can never be reconstructed

All requests for the message elements are made via HTTPS, which encrypts the transmission both ways and verifies the source of the information.

Qiew messages cannot be intercepted on public Wi-Fi networks

All communication of requests and delivered content are direct end-to-end; there is no intermediary server.

A message can block taking a screenshot making re-transmission less likely.

A message can self-destruct after a viewing or a time limit

3. Qiew is private

   Each user has a unique username without requiring a complicated login and uniqueness assurance process

   Message access can be permitted by password or fingerprint, ensuring the viewer is the intended recipient and reducing forgotten passwords

   Database lookup information is unique to the message, so sources and access to individual information is only available to the recipient software

   A Qiew sent to the wrong phone number can be disabled immediately and never be read

   SMS messages saved on intermediary service providers cannot reconstruct the Qiew message

   Access permission can require re-entry for each viewing and/or after viewing conditions - the equivalent of automatic logoff

   Viewer access can be limited to specific elements, not a full web page.

Qiew satisfies the HIPAA requirement that any Protected Health Information intercepted by an unintended viewer is "unreadable, undecipherable, and unusable".
 
Last modified: November 2, 2022