Secure P2P File Transfer via Server-Mediated Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Peer-to-peer (P2P) file transfers are vulnerable to unauthorized access as files can be stolen during transfer, lacking robust authentication and secure path selection between clients.
Innovation Solution
A security-enhanced P2P transfer method that uses a server to connect transmission and reception clients through a relay node by generating and comparing temporary keys, selecting an optimal transfer path based on client locations and transfer speeds, and incorporating security keys to ensure secure file transfer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If P2P direct transfer is used, then transfer speed and efficiency are improved, but security against unauthorized access deteriorates
Solution Approach 1:
The patent introduces a server as an intermediary that coordinates P2P transfers without becoming part of the actual data path. The server issues temporary keys and selects relay nodes to mediate connections between transmission and reception clients, enabling secure authentication while maintaining direct peer-to-peer data transfer for high speed.
Solution Approach 2:
The system performs preliminary authentication and key distribution before actual file transfer begins. Temporary keys are issued in advance through the server, and relay nodes are pre-selected based on location and transfer speed criteria, ensuring security measures are in place before productivity-critical transfer operations start.
2Reliability
If cloud server-based transfer is used, then security is improved, but transfer speed and cost deteriorate
Solution Approach 1:
The system segments the transfer function into two distinct roles: the server handles only coordination, authentication, and key management functions, while actual data transfer occurs directly between peers or through relay nodes. This segmentation allows security functions to be centralized while maintaining high-speed distributed transfer.
Solution Approach 2:
Relay nodes act as intermediaries that enable direct P2P transfer when needed while providing an alternative path through controlled nodes. This maintains the speed benefits of direct transfer while adding layers of security through the relay mechanism, avoiding both pure cloud and pure direct transfer limitations.
3Ease of operation
If temporary keys are made easy to obtain, then ease of operation is improved, but security against key compromise deteriorates
Solution Approach 1:
The patent implements temporary keys that are short-lived and single-use, issued by the server for specific transfer sessions. These disposable keys are easy to obtain and distribute automatically, but their limited validity period and one-time use nature prevent long-term security risks if compromised.
Solution Approach 2:
The system dynamically changes key parameters including validity duration, scope of use, and associated relay node selections. Keys are configured with specific time limits and transfer purposes, making them easy to distribute automatically while limiting the impact of any single key compromise through parameter-based restrictions.
Data Source
AI summary
A P2P transmission method having enhanced security, according to an embodiment of the present invention, comprises: a step for receiving by a server from a first client a first temporary key issuance request; a step for generating a comparison key; a step for receiving an input key from a second client; a step for receiving from a transmission client a transmission request for a particular file; a step for comparing the comparison key and the input key; a transmission path selecting step for selecting a particular transmission path between the transmission client and a reception client if the comparison key and the input key correspond to each other; and a file transmission requesting step for requesting file transmission, through the selected transmission path, from the transmission client and reception client.