Secure File Transfer Server with Group Notification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems and transfer protocols fail to provide secure file transmission to groups of authorized users while benefiting from caching mechanisms, and they struggle to notify devices behind network separation devices like firewalls and NATs.
Innovation Solution
A system that includes a resource management module, shared key generator, file encryption module, group management module, notification module, and packet creation module to encrypt files, manage groups, and notify members securely, allowing caching of encrypted files and notification across network separation devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure connections (HTTPS/SSL) are used for file transfer, then security is improved, but caching benefits are lost
Solution Approach 1:
The system segments the file transfer process into two distinct phases: (1) secure distribution of encryption keys to authorized clients, and (2) efficient caching and transfer of encrypted file content. This segmentation allows different security and caching strategies to be applied to different parts of the data flow, resolving the contradiction between security and caching efficiency.
Solution Approach 2:
The patent introduces an intermediary caching mechanism that stores encrypted file content without requiring decryption. The cache acts as a mediator between the server and clients, serving encrypted content directly to authorized users who possess the decryption keys, thereby eliminating repeated server requests while maintaining security.
2Reliability
If unique security tokens are required for each client, then security is improved, but system complexity increases
Solution Approach 1:
The patent extracts the security token verification requirement from the file content access process. Instead of requiring tokens for every file access operation, the system uses tokens only for initial key distribution, then relies on the caching mechanism for subsequent content delivery. This extraction reduces operational complexity while preserving security.
Solution Approach 2:
The system performs preliminary authentication and key distribution before file transfer. Clients obtain encryption keys through secure authenticated channels in advance, enabling subsequent uncached or cached transfers without repeated authentication overhead. This preliminary action simplifies the main transfer process while maintaining security.
3Reliability
If files are encrypted for secure transfer, then security is improved, but notification delivery to devices behind firewalls/NAT becomes more difficult
Solution Approach 1:
The notification system employs self-service mechanisms where client devices initiate outbound connections to establish communication channels. This approach works effectively with firewalls and NAT devices that typically block inbound connections, as the devices themselves create the communication pathways needed for notification delivery.
Data Source
AI summary
A system, method and computer readable medium for secure file transfer is disclosed. In one embodiment, the system encrypts a file; sends, via a secure channel, a packet to a group having one or more members, the group authorized to access the encrypted file, the packet associated with the encrypted file and including access information for the encrypted file; receives a first request for the encrypted file from a first requestor; and sends the encrypted file to the first requestor via an unsecured channel that performs caching, wherein the first requestor is able to access the encrypted file using the packet when the first requestor is a member of the group authorized to access the encrypted file and received the packet via the secure channel and unable to access the encrypted file when the first requestor is not a member of the group authorized to access the encrypted file.