SYSTEM AND METHOD FOR DECENTRALIZED ONLINE DATA TRANSFER AND SYNCHRONIZATION

• US 20130179947A1
• Filed: 01/04/2013
• Published: 07/11/2013
• Est. Priority Date: 01/05/2012
• Status: Active Grant

• Current Assignee: Open Text Holdings, Inc. (Open Text Corporation)
• Original Assignee: Adept Cloud, Inc. (Open Text Corporation)
• Inventors: Kline, Frank-Robert III, Nathan, Aaron Moise, Schoenberg, Jonathan R.
• Granted Patent: US 8,955,103 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54

Abstract

A method of sharing data is disclosed. A request from a client node to access data in a share associated with a server node is received. A communication from a management nexus is received. The communication includes a confirmation of an identity of the client node and a confirmation of an authorization for the client node to access the data in the share associated with the server node. The client node is allowed to access the data in the share associated with the server node based on the communication from the management nexus. However, the data is not sent to the management nexus.

Claims

1. A system comprising:

a processor-implemented server node configured to;

receive a request from a processor-implemented client node to access data in a share associated with the server node;

receive a communication from a processor-implemented management nexus, the communication including a confirmation of an identity of the client node and a confirmation of an authorization for the client node to access the data in the share associated with the server node; and

allow the client node to access the data in the share associated with the server node based on the communication from the management nexus without sending the data to the management nexus.

2. The system of claim 1, wherein the processor-implemented server node is further configured to:

receive a client certificate from the client node; and

send a request to the management nexus to verify a status of the client certificate;

wherein the confirmation of the authorization for the client node to access the data in the share associated with the server node is based on the verifying of the status of the client certificate by the management nexus; and

the accessing of the data in the share associated with the server node includes establishing a secure channel based on the verifying of the status of the certificate by the management nexus.

3. The system of claim 1, wherein the client node is configured to:

receive a notification from the management nexus that the data in the share of the server node is accessible to the client, the notification including information pertaining to accessing the data;

establish a connection to the server node based on the information pertaining to the accessing of the data;

receive the data over the connection to the server node without the data being sent to the management nexus.

4. The system of claim 3, wherein the information pertaining to the accessing of the data includes an endpoint for the connection, the endpoint being registered by the server node with a relay server created by the management nexus.

5. The system of claim 3, wherein the client node is further configured to:

receive the client certificate from the management nexus;

send the client certificate to the server node;

receive a server certificate from the server node; and

send a request to the management nexus to verify a status of the server certificate; and

wherein the establishing of the connection to the server node is based on the verifying of the status of the server certificate by the management nexus.

6. The system of claim 3, wherein the share is a copy of an original share, the original share being associated with an original server node, the information pertaining to the accessing of the data selected by the management nexus based on a determination that the original server node is unreachable.

7. The system of claim 4, wherein the relay server is created dynamically based on a receiving of a request by the client node to establish the connection and a determining by the management nexus that the server node is behind a firewall.

8. A method comprising:

receiving a request from a client node to access data in a share associated with a server node;

receiving a communication from a management nexus, the communication including a confirmation of an identity of the client node and a confirmation of an authorization for the client node to access the data in the share associated with the server node; and

allowing the client node to access the data in the share associated with the server node based on the communication from the management nexus without sending the data to the management nexus, wherein the allowing of the client node to access the data in the share associated with the server node is performed by one or more processors.

9. The method of claim 8, further comprising:

receiving a client certificate from the client node; and

sending a request to the management nexus to verify a status of the client certificate;

wherein the confirmation of the authorization for the client node to access the data in the share associated with the server node is based on the verifying of the status of the client certificate by the management nexus; and

the accessing of the data in the share associated with the server node includes establishing a secure channel based on the verifying of the status of the certificate by the management nexus.

10. The method of claim 8, wherein the client node is configured to:

receive a notification from the management nexus that the data in the share of the server node is accessible to the client, the notification including information pertaining to accessing the data;

establish a connection to the server node based on the information pertaining to the accessing of the data; and

receive the data over the connection to the server node without the data being sent to the management nexus.

11. The method of claim 10, wherein the information pertaining to the accessing of the data includes an endpoint for the connection, the endpoint being registered by the server node with a relay server created by the management nexus.

12. The method of claim 10, wherein the client node is further configured to:

receive the client certificate from the management nexus;

send the client certificate to the server node;

receive a server certificate from the server node; and

send a request to the management nexus to verify a status of the server certificate; and

wherein the establishing of the connection to the server node is based on the verifying of the status of the server certificate by the management nexus.

13. The method of claim 10, wherein the share is a copy of an original share, the original share being associated with an original server node, the information pertaining to the accessing of the data selected by the management nexus based on a determination that the original server node is unreachable.

14. The method of claim 11, wherein the relay server is created dynamically based on a receiving of a request by the client node to establish the connection and a determining by the management nexus that the server node is behind a firewall.

15. A non-transitory machine readable storage medium storing a set of instructions that, when executed by at least one processor, causes the at least one processor to perform operations, the operations comprising:

receiving a request from a client node to access data in a share associated with a server node;

receiving a communication from a management nexus, the communication including a confirmation of an identity of the client node and a confirmation of an authorization for the client node to access the data in the share associated with the server node; and

allowing the client node to access the data in the share associated with the server node based on the communication from the management nexus without sending the data to the management nexus.

16. The non-transitory machine readable storage medium of claim 15, the operations further comprising:

receiving a client certificate from the client node; and

sending a request to the management nexus to verify a status of the client certificate;

wherein the confirmation of the authorization for the client node to access the data in the share associated with the server node is based on the verifying of the status of the client certificate by the management nexus; and

the accessing of the data in the share associated with the server node includes establishing a secure channel based on the verifying of the status of the certificate by the management nexus.

17. The non-transitory machine readable storage medium of claim 15, wherein the client node is configured to:

receive a notification from the management nexus that the data in the share of the server node is accessible to the client, the notification including information pertaining to accessing the data;

establish a connection to the server node based on the information pertaining to the accessing of the data; and

receive the data over the connection to the server node without the data being sent to the management nexus.

18. The non-transitory machine readable storage medium of claim 17, wherein the information pertaining to the accessing of the data includes an endpoint for the connection, the endpoint being registered by the server node with a relay server created by the management nexus.

19. The non-transitory machine readable storage medium of claim 18, wherein the client node is further configured to:

receive the client certificate from the management nexus;

send the client certificate to the server node;

receive a server certificate from the server node; and

send a request to the management nexus to verify a status of the server certificate; and

wherein the establishing of the connection to the server node is based on the verifying of the status of the server certificate by the management nexus.

20. The non-transitory machine readable storage medium of claim 17, wherein the share is a copy of an original share, the original share being associated with an original server node, the information pertaining to the accessing of the data selected by the management nexus based on a determination that the original server node is unreachable.