Secure P2P Connection Network for Group Communication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing network technologies face inefficiencies in managing secure peer-to-peer connections across distributed software applications, particularly in ensuring authorized connections and maintaining data security within group-based communication systems.

Innovation Solution

A system that facilitates secure peer-to-peer connections by using a group-based communication server to validate client identifiers through a validation registry, enabling authorized connections via validated WebSocket connections and utilizing group-wide encryption protocols for secure data transmission over local area networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional network technologies are used for peer-to-peer connections, then connection establishment is simpler, but security and authorization control are insufficient

Engineering Contradiction:
Improveconnection securityVSAvoidconnection management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The server acts as an intermediary that facilitates peer-to-peer connections without being the primary communication path. The server validates client identifiers through a validation registry, issues initiation instructions, and establishes WebSocket connections, but the actual data transmission occurs directly between peer clients. This resolves the contradiction by providing centralized security control through the server while maintaining efficient direct peer-to-peer data paths.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If centralized server control is implemented for authorization, then security is improved, but network latency and complexity increase

Engineering Contradiction:
Improveauthorization controlVSAvoidconnection establishment time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The server performs preliminary authorization actions by validating client identifiers against the validation registry before establishing peer-to-peer connections. The server issues initiation instructions that contain pre-validated authorization information, allowing peer clients to establish connections without repeated server interventions. This resolves the contradiction by concentrating authorization control in a preliminary server action while enabling faster subsequent peer-to-peer communication.

Inventive Principle:
Principle #10Preliminary action

3Speed

If peer-to-peer connections are established without validation, then connection speed is faster, but unauthorized access risk increases

Engineering Contradiction:
Improveconnection establishment speedVSAvoidunauthorized access risk
Core Design Contradiction:
SpeedVSObject-affected harmful factors

Solution Approach 1:

The server acts as a trusted intermediary that validates client identifiers through a validation registry before allowing peer-to-peer connections. The server issues initiation instructions that ensure both peers are authorized, eliminating unauthorized access risks while maintaining fast direct peer-to-peer data transmission paths. This resolves the contradiction by separating the validation function (performed by server) from the data transmission function (performed directly by peers).

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11848923B2Secure peer-to-peer connection network and associated protocols for a group-based communication system
Publication Date: 2023.12.19 SALESFORCE INC
  • US11848923B2 patent drawing
  • US11848923B2 patent drawing
  • US11848923B2 patent drawing

AI summary

Secure peer-to-peer connection network and/or protocols for a group-based communication system, in which, a peer-to-peer connection request associated with a first identifier for a first client device and a second identifier for a second client device are received. The first identifier and the second identifier are compared to a group-based communication system validation registry associated with the group-based communication system and, based at least in part on a determination that the peer-to-peer connection request is authorized per the group-based communication system validation registry, a peer-to-peer connection between the second client device and the first client device is established.