Secure Mobile File Sharing via P2P Link and Permission Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for file sharing on mobile devices lack security, as they do not enforce corporate security policies, allowing unauthorized access to sensitive data when personal devices are used in the workplace.

Innovation Solution

A method using peer-to-peer technologies like Bluetooth or Near Field Communications (NFC) to establish connections between mobile devices, where a sender shares a link to a file, and the recipient's permissions are verified through an enterprise permissions server before file access is granted, ensuring compliance with corporate security policies.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If e-mail is used to share files in meetings, then file sharing convenience is improved, but corporate security policy compliance deteriorates

Engineering Contradiction:
Improvefile sharing convenienceVSAvoidcorporate security policy compliance
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces an intermediary permission checking mechanism that sits between the file sharing action and the actual file transfer. When a user attempts to share a file via e-mail or other channels, the system intercepts the request, checks the recipient's permissions against corporate policy, and either allows or blocks the transfer accordingly. This mediator ensures security compliance without completely preventing convenient file sharing methods.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements feedback by continuously monitoring file sharing attempts and providing real-time permission verification. When a file sharing action occurs, the system checks permissions and provides immediate feedback on whether the transfer is authorized. This feedback loop ensures that corporate security policies are enforced dynamically based on user credentials and file classification levels.

Inventive Principle:
Principle #23Feedback

2Adaptability or versatility

If personal mobile devices are used in the workplace, then device preference and cost savings are improved, but security control deteriorates

Engineering Contradiction:
Improvedevice preferenceVSAvoidsecurity control
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary action by implementing permission checks before files are transferred to or from personal devices. The system pre-authenticates user credentials, pre-classifies files according to corporate security policies, and pre-determines whether a given device-user combination is authorized to access specific files. This preliminary security verification occurs before the actual file transfer, allowing personal device usage while maintaining control.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system segments security control by creating separate permission layers for different devices, users, and file types. Instead of treating all personal devices uniformly, the system divides permission checking into granular segments based on user credentials, device identity, file classification, and corporate policy rules. This segmented approach allows selective authorization, enabling legitimate personal device usage while blocking unauthorized access.

Inventive Principle:
Principle #1Segmentation

3Productivity

If files are sent without permission checks, then file sharing speed is improved, but unauthorized access increases

Engineering Contradiction:
Improvefile sharing speedVSAvoidunauthorized access
Core Design Contradiction:
ProductivityVSObject-generated harmful factors

Solution Approach 1:

The patent applies partial action by implementing permission checks only for specific file types, users, and recipients based on corporate policy requirements. For highly sensitive files or unauthorized users, comprehensive permission verification is performed. For low-risk scenarios, the system may use cached permission data or simplified verification processes. This partial checking approach balances security requirements with file sharing efficiency, avoiding unnecessary delays for authorized transfers while maintaining strict controls for sensitive data.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS10069899B2System and method of secure file sharing using P2P
Publication Date: 2018.09.04 VMWARE INC
  • US10069899B2 patent drawing
  • US10069899B2 patent drawing
  • US10069899B2 patent drawing

AI summary

A method is provided for sharing a file. A first mobile device can generate a link and the link can enable a second mobile device to send a request to a permission server to access a file from a remote server. The permission server can determine a unique identifier of the second mobile device is associated with sufficient file sharing privileges to receive the file from the remote server. Additionally, the permission server can enable the second mobile device to download the file from the remote server, upon determining that the unique identifier is associated with sufficient file sharing privileges. Once the second mobile device with sufficient file sharing privileges downloads the file from the remote server, the first mobile device can receive a confirmation.