Cloud Authenticated Offline File Sharing via P2P

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing file transfer methods via public networks are vulnerable to security breaches and increase network complexity, consuming significant bandwidth and resources, while using a server for authentication limits transfer speed.

Innovation Solution

A secure authentication mechanism for offline file sharing that uses a cloud server to generate a session token, allowing devices to establish a peer-to-peer network for fast and secure file transfer without constant internet connection, utilizing asymmetric key pairs and Wi-Fi Direct for authentication and connection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a server is used to provide authentication and security protection for file transfers, then security against breaches and attacks is improved, but network bandwidth consumption and computing resource usage increase significantly

Engineering Contradiction:
Improvesecurity protectionVSAvoidnetwork bandwidth consumption
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent extracts the authentication function from the file transfer process itself, performing authentication beforehand through a separate mechanism (QR code exchange, session token generation) so that the actual file transfer occurs directly between devices without server involvement, thus eliminating continuous bandwidth consumption during transfer

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

Authentication and security setup are performed in advance through QR code exchange and session token generation before the actual file transfer begins. This preliminary authentication establishes secure credentials that enable direct peer-to-peer transfer without requiring ongoing server mediation, reducing real-time resource consumption

Inventive Principle:
Principle #10Preliminary action

2Reliability

If a server is used to facilitate file transfer by downloading and re-uploading files, then security protection is improved, but transfer speed is limited by the server's network connection speed

Engineering Contradiction:
Improvesecurity protectionVSAvoidfile transfer speed
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

The patent removes the server from the file transfer path entirely after initial authentication. The actual file transfer occurs directly between sender and receiver devices through peer-to-peer connection, eliminating the server as a bottleneck and enabling transfer speeds limited only by the direct device connection rather than server network capacity

Inventive Principle:
Principle #2Taking out (Extraction)

3Productivity

If direct peer-to-peer transfer without server mediation is used, then transfer speed and resource efficiency are improved, but vulnerability to security breaches and malicious attacks increases

Engineering Contradiction:
Improvefile transfer speedVSAvoidsecurity vulnerability
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

Authentication is performed in advance through QR code exchange and session token generation before the direct peer-to-peer transfer begins. This preliminary security setup establishes verified credentials that protect the direct connection without requiring ongoing server mediation, enabling both high speed and security

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces QR codes and session tokens as intermediary authentication mechanisms that enable secure direct connection without continuous server involvement. These intermediaries facilitate trust establishment between devices while allowing the actual transfer to proceed directly without server mediation

Inventive Principle:
Principle #24Intermediary (Mediator)

4Reliability

If a server is used for authentication and file transfer facilitation, then security protection is improved, but network complexity and maintenance overhead increase

Engineering Contradiction:
Improvesecurity protectionVSAvoidnetwork complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the authentication function from continuous server-mediated transfer and implements it as a standalone preliminary process. Once authentication is complete, the server is removed from the equation entirely, allowing simple direct peer-to-peer transfer without complex server infrastructure or maintenance requirements

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS11451614B2Cloud authenticated offline file sharing
Publication Date: 2022.09.20 CITRIX SYSTEMS INC
  • US11451614B2 patent drawing
  • US11451614B2 patent drawing
  • US11451614B2 patent drawing

AI summary

Described embodiments provide systems and methods for transferring a file. A sender device configured to transfer a file to a receiver device may send an identifier of the receiver device and a public key to a server via a first network. The sender device may receive, via the first network prior to disconnecting from the first network, a session token from the server. The session token and the public key may be sent to the receiver device via the first network. The sender device may detect, after receiving the session token, a peer-to-peer (P2P) wireless network established by the receiver device. The P2P wireless network may broadcast a service set identifier (SSID) with a network key encrypted using the public key. The sender device may connect, using the network key, to the P2P wireless network to transfer the file to the receiver device via the P2P wireless network.