Development of a Secure Encrypted Communication System for Business Teams

By Paulo NUHAJ, Agim KASAJ

Abstract
In today’s world, technology has advanced to such an extent that large companies
and organizations increasingly rely on digital platforms to conduct their internal communication. These platforms often advertise the latest technological methods they employ, yet many of them have not placed communication security as a primary focus, leaving room for various risks such as eavesdropping, third-party interference, and data leakage. This situation is also evident in the Albanian context, where many companies face serious challenges in securing their internal communication. Considering this problem, the objective of this project is to develop a dedicated and reliable platform for secure communication within an organization. The proposed solution is the creation of a protected environment for information exchange among company members, while adhering to the fundamental principles of information security: confidentiality, integrity, and availability of data.
The architecture of this platform has been designed using React.js for the user interface, while Node.js and Express.js were employed for the backend. Data management is handled through MongoDB. What makes this platform secure is the implementation of end-to-end encryption (E2EE), where messages are encrypted using the AES-GCM (Advanced Encryption Standard – Galois/Counter Mode) algorithm, while the corresponding keys are encrypted with RSA 4096. During registration, each user generates an RSA key pair, and the private key is stored in encrypted form using a symmetric key derived from the user’s password through the bcrypt algorithm. The platform also includes multi-factor authentication (2FA), where the user receives a unique code via email to complete the login process. This project was initiated with the aim of providing a solution to
the communication security challenges faced by companies operating under high security standards.

Keywords: End-to-end encryption, Albania, Cybersecurity, Institutions, Threats, Risk Management.

https://doi.org/10.58944/misl3931