Peer-to-peer communication system with RAM caching and automated deletion

Abstract

System for secure peer-to-peer data transmission between two communication partners without the use of a central server or permanent intermediate storage.

Description

Technical Description 1. Initial Situation and Problem Statement

[0001] Increasingly sensitive data is being transmitted over public networks. Conventional solutions rely on centralized servers or cloud storage. This increases the risk of data leaks, manipulation, and unauthorized access. Therefore, security-critical applications require a communication system that operates without permanent storage, uses only volatile memory, and "forgets" itself after the session ends. Technical solution (invention)

[0002] The invention comprises a system for secure peer-to-peer data transmission without central servers and without persistent caching. Key elements: • Direct point-to-point communication between two authorized end devices. • Temporary RAM caching of the transferred data exclusively during the active transfer. • Automatic, encrypted deletion of all RAM instances after completion of the transfer. • End-to-end encryption, optionally supplemented by passwords or certificates. • Tool-bound access control (only verified software instances are allowed to participate). • Redundant RAM mirroring for the deletion process: • -0 = Reserve buffer |-1 = Start transfer |0 = Simple RAM release | 1 = SecureErase (multiple overwrites). 3. System process 1. Connection establishment: An authenticated peer-to-peer connection is established. 2. Encryption: The data to be sent is encrypted. 3. RAM caching: Data is held in the sender's RAM (instance - 0) and in a backup instance (-1); swapping is disabled. 4. Transmission: Control value -1 starts the packet-wise direct transfer to the receiver's RAM. 5. Decryption: The receiver decrypts the data in RAM. 6. Erase control: Sender transmits footer bit 0 or 1. ▪ 0 → simple zeroing ▪ 1 → multiple algorithmic overrides. 7. Synchronized RAM destruction: Both devices execute the corresponding erasure routine. Afterwards, session keys are discarded, memory is freed, and new connections can be initiated. 4. Special features • No permanent storage: Neither on hard drive nor in the cloud. • Redundancy: An additional RAM instance prevents data loss in case of failures. • Erasure security: Selectable security levels (0 / 1) enable application-dependent RAM destruction. • Flexible cryptography: Can be used symmetrically, asymmetrically or in hybrid mode. 5. Advantages ▪ Maximum data security without central attack vectors. ▪ Full user control through purely temporary storage. ▪ Automated self-destruction of communication traces. ▪ Scalable for all data types (text, audio, video, software, biometrics). ▪ Fail-safe thanks to RAM backup instance. 6. Areas of application ▪ Authorities and government agencies ▪ Critical infrastructures (energy, transport, health) ▪ Medical facilities ▪ Financial service provider ▪ Companies with increased protection needs ▪ Journalism, NGOs, whistleblower communication legend • -0: Reserve RAM buffer, disable swapping • -1: Start packet transmission • FooterBit 0: simple buffer zeroing • FooterBit 1: Secure multiple overwrite (SecureErase) • After step 9, both devices are free for new connections.

Claims

[1] System for secure peer-to-peer data transmission between two communication partners without the use of a central server or permanent intermediate storage. [2] System according to claim 1, characterized by that the data to be transferred is stored only temporarily in RAM (Random Access Memory). [3] System according to any one of the preceding claims, characterized by , that after the data transfer is complete, the temporary storage instances are automatically and completely deleted. [4] System according to any one of the preceding claims, characterized by that the data is encrypted before and during transmission. [5] System according to any one of the preceding claims, characterized by that access to the communication software is protected by additional authentication using a password or certificate. [6] System according to any one of the preceding claims, characterized bythat redundant intermediate storage of the data takes place in at least one additional temporary instance in RAM to ensure uninterrupted peer-to-peer data transmission. [7] System according to any one of the preceding claims, characterized by that the data to be transferred may include any type of information, including but not limited to: text, audio, video, software applications, media files, biometric data or other digital content. [8] System according to any one of the preceding claims, characterized by , that before the start of the transmission a control value (-0) is set which reserves a RAM buffer for temporary storage. [9] System according to any one of the preceding claims, characterized by , that after successful initialization a control value (-1) is set, which initiates the actual data transmission. [10] System according to any one of the preceding claims, characterized by, that after successful transmission, the sender sends a protocol bit (0 or 1) which determines the type of RAM erasure at the receiver. [11] System according to claim 10, characterized by , that the protocol bit takes the value 0 for a simple memory release or the value 1 for a secure, multiple algorithmic overwrite of the RAM. [12] System according to any one of the preceding claims, characterized by that the RAM erasure is performed synchronously and automatically on both the sender and receiver sides. [13] System according to any of the preceding claims, wherein RAM memory areas are protected against swapping by the operating system (e.g. mlock, VirtualLock). [14] Computer program product that performs the steps mentioned in claims 1 to 13 fully automatically.