Information security model for messengers based on Matrix protocol

Abstract

Methodological and technological solutions for the creation of secure decentralized messengers for departmental and corporate communication systems are presented.  A model for ensuring information security in messengers developed based on the Matrix open protocol is proposed, providing end-to-end encryption of communications, voice and video communications, as well as federated interaction. The model is implemented as a modular architecture based on the principles of microservices and containerization, using a technology stack including Synapse, PostgreSQL, LiveKit, lk-jwt-service, Nginx and Docker Compose. A special feature of the model is its focus on deployment on peripheral network devices running OpenWRT, which provides full control over the infrastructure and eliminates dependence on external platforms. Verification of compliance with information security requirements was carried out in accordance with GOST R 56939-2024. The practical significance of the work is confirmed by the successful deployment of a functioning prototype demonstrating stable operation in various operating conditions.  The main positive effect is to significantly reduce the complexity of deploying and maintaining the messenger while ensuring the requirements for confidentiality and sovereignty of functioning.