Secure Mobile File Sharing via P2P Link and Permission Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for file sharing on mobile devices lack security, as they do not enforce corporate security policies, allowing unauthorized access to sensitive data when personal devices are used in the workplace.
Innovation Solution
A method using peer-to-peer technologies like Bluetooth or Near Field Communications (NFC) to establish connections between mobile devices, where a sender shares a link to a file, and the recipient's permissions are verified through an enterprise permissions server before file access is granted, ensuring compliance with corporate security policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If e-mail is used to share files in meetings, then file sharing convenience is improved, but corporate security policy compliance deteriorates
Solution Approach 1:
The patent introduces an intermediary permission checking mechanism that sits between the file sharing action and the actual file transfer. When a user attempts to share a file via e-mail or other channels, the system intercepts the request, checks the recipient's permissions against corporate policy, and either allows or blocks the transfer accordingly. This mediator ensures security compliance without completely preventing convenient file sharing methods.
Solution Approach 2:
The system implements feedback by continuously monitoring file sharing attempts and providing real-time permission verification. When a file sharing action occurs, the system checks permissions and provides immediate feedback on whether the transfer is authorized. This feedback loop ensures that corporate security policies are enforced dynamically based on user credentials and file classification levels.
2Adaptability or versatility
If personal mobile devices are used in the workplace, then device preference and cost savings are improved, but security control deteriorates
Solution Approach 1:
The patent applies preliminary action by implementing permission checks before files are transferred to or from personal devices. The system pre-authenticates user credentials, pre-classifies files according to corporate security policies, and pre-determines whether a given device-user combination is authorized to access specific files. This preliminary security verification occurs before the actual file transfer, allowing personal device usage while maintaining control.
Solution Approach 2:
The system segments security control by creating separate permission layers for different devices, users, and file types. Instead of treating all personal devices uniformly, the system divides permission checking into granular segments based on user credentials, device identity, file classification, and corporate policy rules. This segmented approach allows selective authorization, enabling legitimate personal device usage while blocking unauthorized access.
3Productivity
If files are sent without permission checks, then file sharing speed is improved, but unauthorized access increases
Solution Approach 1:
The patent applies partial action by implementing permission checks only for specific file types, users, and recipients based on corporate policy requirements. For highly sensitive files or unauthorized users, comprehensive permission verification is performed. For low-risk scenarios, the system may use cached permission data or simplified verification processes. This partial checking approach balances security requirements with file sharing efficiency, avoiding unnecessary delays for authorized transfers while maintaining strict controls for sensitive data.
Data Source
AI summary
A method is provided for sharing a file. A first mobile device can generate a link and the link can enable a second mobile device to send a request to a permission server to access a file from a remote server. The permission server can determine a unique identifier of the second mobile device is associated with sufficient file sharing privileges to receive the file from the remote server. Additionally, the permission server can enable the second mobile device to download the file from the remote server, upon determining that the unique identifier is associated with sufficient file sharing privileges. Once the second mobile device with sufficient file sharing privileges downloads the file from the remote server, the first mobile device can receive a confirmation.


