Internet-based shared file service with native PC client access and semantics and distributed access control

• US 7,136,903 B1
• Filed: 11/01/2000
• Issued: 11/14/2006
• Est. Priority Date: 11/22/1996
• Status: Expired due to Term

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Mangosoft Intellectual Property Incorporated (Mangosoft Incorporated)
• Inventors: Phillips, Robert S., Porter, David, Nyman, Scott E., Dietterich, Daniel J., Davis, Scott H.
• Primary Examiner(s): LIN, WEN TAI
• Application Number:
  US09/704,050
• Time in Patent Office: 2,204 Days
• Field of Search: 709/203, 709/213, 709/219, 709/245, 709/217, 707/10, 707/201, 380/30
• US Class Current: 709/217
• CPC Class Codes: G06F 16/10 File systems; File servers
• CPC Class Codes: G06F 16/95 Retrieval from the web

Abstract

A multi-user file storage service and system enable each user of a pre-subscribed user group to communicate with a remote file server node via a wide area network and to access the files of the file group via the respective client node. More than one user of the pre-subscribed user group is permitted to access the file group at the remote file server node simultaneously. Integrity of the files at the remote file server node are maintained by controlling each access to each file at the remote file server node so that each access to files at the remote file server is performed, if at all, on a respective portion of each file as most recently updated at the remote file server node. Additionally, an encrypted key is transferred from the file server node to a particular client node via a secure channel. The encrypted key uses an encryption function and a decryption function not known locally at the remote file server. Furthermore, both privileged access control rights and file sharing mode access control to a particular file of the group of files are delegated to one or more distributed nodes other than the remote file server node which provides the data.

Claims

1. A method for providing multi user file storage comprising the steps of:

(a) enabling each user of a pre-subscribed user group of one or more users to connect an arbitrary client node at an arbitrary geographic location to a remote file server node via a wide area network,

(b) enabling each user of the pre-subscribed user group to access files of a file group at the remote file server node via the respective client node connected to the remote file server node via the wide area network, including permitting, when the pre-subscribed user group includes at least two users, more than one user of the pre-subscribed user group to access the same file of the file group at the remote file server node simultaneously,

(c) maintaining the integrity of the files at the remote file server node by controlling each access to each of the files at the remote file server node so that each access to each of the files at the remote file server node is performed, if at all, on a respective portion of the respective file as most recently updated at the remote file server node, wherein the respective portion is less than all of the respective file, thereby enabling all native operating system application programming interfaces to operate so that all multi-user applications accessing the files function as if the remote file server node, which stores the files, and client nodes, at which such multi-user applications execute, were on the same local area network, and

(d) delegating both privileged rights access control and file sharing mode access control to a particular file of the group of files to one or more distributed nodes other than the remote file server node which provides the data.

2. The method of claim 1 further comprising the steps of:

(e) requesting at a particular client node access to one of the files of the group of files, and

(f) if the one file is the particular file, accessing the particular file at the particular client node only if permitted by the access control node.

3. The method of claim 2 further comprising the steps of:

(g) issuing the request from the particular client node to the remote file server node, and

(h) in response to determining that the one file is the particular file, forwarding the request to the access control node.

4. The method of claim 3 further comprising the step of:

(i) in response to receiving at the particular client node a response from the access control node, issuing further messages pertaining to the access of the particular file directly from the particular client node to the access control node.

5. The method of claim 1 further comprising the step of:

(e) delegating version control of the particular file to a version control node.

6. The method of claim 5 further comprising the steps of:

(f) requesting, at a particular client node, for confirmation that at least a part of a particular copy of the particular file is the most updated version of the respective part of the particular copy of the file, and

(g) accessing the part of the particular copy of the particular file only if permitted by the version control node.

7. The method of claim 6 wherein the particular client node stores the part of the particular copy in a storage device which is physically located locally to the particular client node.

8. The method of claim 6 further comprising the steps of:

(h) issuing a request for confirming that at least a part of the particular file is the most updated version, from the particular client node to the remote file server node, and

(i) in response to determining that the one file is the particular file, forwarding the message to the version control node.

9. The method of claim 8 further comprising the step of:

(j) in response to receiving a response from the version control node at the particular client node, issuing further messages pertaining to version of the particular file directly from the particular client node to the version control node.

10. The method of claim 9 wherein in response to modifying the particular file, the particular client node issues to the version control node a version update message for the file indicating a recent update has occurred on the particular file.

11. The method of claim 5 wherein the version control node is also the access control node for the particular file.

12. The method of claim 1 further comprising the step of:

(e) while a particular client node is in communication with the remote file server node, selectively downloading from the remote file server node to the particular client node via the wide area network a copy of at least a most recently updated portion of a particular file to be accessed by the particular client node and which the particular client node lacks, wherein at all times, each client node in communication with the remote file server node adheres to explicit and implicit file sharing modes specified by the native file application programming interfaces.

13. A method for providing multi user file storage comprising the steps of:

(a) enabling each user of a pre subscribed user group of one or more users operating an arbitrary client node at an arbitrary geographic location to communicate with a remote file server node via a wide area network,

(b) enabling each user of the pre subscribed user group to access files of a file group at the remote file server node via the respective client node in communication with the remote file server node via the wide area network, including permitting, when the pre-subscribed user group includes at least two users, more than one user of the pre subscribed user group to access the same file of the file group at the remote file server node simultaneously,

(c) providing an interface for adapting file access at a particular client node by designating at the particular client node each accessible file of the file group as stored on a virtual storage device, and enabling access to the designated files in a fashion which is indistinguishable, by users of, and applications executing at, the particular client node, with access to one or more files stored on a physical storage device that is locally present at the particular client node, and

(d) delegating both privileged rights access control and file sharing mode access control to a particular file of the group of files to one or more distributed nodes other than the remote file server node which provides the data, such that access to the particular file maintained at the remote file server node occurs on a most up to date version of the particular file.

14. The method of claim 13 further comprising the steps of:

(e) requesting at a particular client node access to one of the files of the group of files, and

(f) if the one file is the particular file, accessing the particular file at the particular client node only if permitted by the access control node.

15. The method of claim 14 further comprising the steps of:

(g) issuing the request from the particular client node to the remote file server node, and

(h) in response to determining that the one file is the particular file, forwarding the request to the access control node.

16. The method of claim 15 further comprising the step of:

(i) in response to receiving at the particular client node a response from the access control node, issuing further messages pertaining to the access of the particular file directly from the particular client node to the access control node.

17. The method of claim 13 further comprising the step of:

(e) delegating version control of the particular file to a version control node.

18. The method of claim 17 further comprising the steps of:

(f) requesting, at a particular client node, for confirmation that at least a part of a particular copy of the particular file is the most updated version of the respective part of the particular copy of the file, and

(g) accessing the part of the particular copy of the particular file only if permitted by the version control node.

19. The method of claim 18 wherein the particular client node stores the part of the particular copy in a storage device which is physically located locally to the particular client node.

20. The method of claim 18 further comprising the steps of:

(h) issuing a request for confirming that at least a part of the particular file is the most updated version, from the particular client node to the remote file server node, and

(i) in response to determining that the one file is the particular file, forwarding the message to the version control node.

21. The method of claim 20 further comprising the step of:

(j) in response to receiving a response from the version control node at the particular client node, issuing further messages pertaining to version of the particular file directly from the particular client node to the version control node.

22. The method of claim 21 wherein in response to modifying the particular file, the particular client node issues to the version control node a version update message for the file indicating a recent update has occurred on the particular file.

23. The method of claim 17 wherein the version control node is also the access control node for the particular file.

24. A method for providing multi user file storage comprising the steps of:

(a) enabling each user of a pre subscribed user group of one or more users operating an arbitrary client node at an arbitrary geographic location to communicate with a remote file server node via a wide area network,

(b) enabling each user of the pre subscribed user group to access files of a file group at the remote file server node via the respective client node in communication with the remote file server node via the wide area network, including permitting, when the pre-subscribed user group includes at least two users, more than one user of the pre subscribed user group to access the same file of the file group at the remote file server node simultaneously,

(c) transferring an encrypted key from the remote file server node to a particular client node via a secure channel, the encrypted key being encrypted using an encryption function not known locally at the remote file server node, the key being decryptable using a decryption function not known locally at the remote file server node, the decryption function being also not known locally at any other client node usable by others of the pre-subscribed user group,

(d) decrypting the transferred key at the particular client node,

(e) using the key at the particular client node to decrypt information of a file downloaded from the remote file server node or to encrypt information of a file prior to uploading for storage at the remote file server node, and

(f) delegating both privileged rights access control and file sharing mode access control to a particular file of the group of files to one or more distributed nodes other than the remote file server node which provides the data.

25. The method of claim 24 further comprising the steps of:

(g) requesting at a particular client node access to one of the files of the group of files, and

(h) if the one file is the particular file, accessing the particular file at the particular client node only if permitted by the access control node.

26. The method of claim 25 further comprising the steps of:

(i) issuing the request from the particular client node to the remote file server node, and

(j) in response to determining that the one file is the particular file, forwarding the request to the access control node.

27. The method of claim 25 further comprising the step of:

(k) in response to receiving at the particular client node a response from the access control node, issuing further messages pertaining to the access of the particular file directly from the particular client node to the access control node.

28. The method of claim 24 further comprising the step of:

(g) delegating version control of the particular file to a version control node.

29. The method of claim 28 further comprising the steps of:

(h) requesting, at a particular client node, for confirmation that at least a part of a particular copy of the particular file is the most updated version of the respective part of the particular copy of the file, and

(i) accessing the part of the particular copy of the particular file only if permitted by the version control node.

30. The method of claim 29 wherein the particular client node stores the part of the particular copy in a storage device which is physically located locally to the particular client node.

31. The method of claim 29 further comprising the steps of:

(j) issuing a request for confirming that at least a part of the particular file is the most updated version, from the particular client node to the remote file server node, and

(k) in response to determining that the one file is the particular file, forwarding the message to the version control node.

32. The method of claim 31 further comprising the step of:

(l) in response to receiving a response from the version control node at the particular client node, issuing further messages pertaining to version of the particular file directly from the particular client node to the version control node.

33. The method of claim 32 wherein in response to modifying the particular file, the particular client node issues to the version control node a version update message for the file indicating a recent update has occurred on the particular file.

34. The method of claim 28 wherein the version control node is also the access control node for the particular file.

35. A system for providing multi user file storage comprising the steps of:

a remote file server node for enabling each user of a pre subscribed user group of one or more users to connect an arbitrary client node at an arbitrary geographic location to communicate with said remote file server node via a wide area network,

a storage device at the remote file server node for enabling each user of the pre subscribed user group to access files of a file group at the remote file server node via the respective client node in communication with the remote file server node via the wide area network, including permitting, when the pre-subscribed user group includes at least two users, more than one user of the pre subscribed user group to access the same file of the file group at the remote file server node simultaneously, and

wherein the remote file server node is also for while enabling a plurality of the users to access the same file, concurrently maintaining the integrity of the files at the remote file server node by controlling each access to each of the files at the remote file server node so that each access to each of the files at the remote file server node is performed, if at all, on a respective portion of the respective file as most recently updated at the remote file server node, wherein the respective portion is less than all of the respective file, thereby enabling all native operating system application programming interfaces to operate so that all multi user applications accessing the files function as if the remote file server node, which stores the files, and client nodes, at which such multi user applications execute, were on the same local area network, and

wherein the remote file server node is also for delegating both privileged rights access control and file sharing mode access control to a particular file of the group of files to one or more distributed nodes other than the remote file server node which provides the data.

36. The system of claim 35 wherein a particular client node requests access to one of the files of the group of files, and wherein if the one file is the particular file, accessing the particular file at the particular client node only if permitted by the access control node.

37. The system of claim 36 wherein the particular client node issues the request to the remote file server node, and

wherein the remote file server node forwards the request to the access control node in response to determining that the one file is the particular file.

38. The system of claim 37 wherein the particular client node, in response to receiving a response from the access control node, issues further messages pertaining to the access of the particular file directly from the particular client node to the access control node.

39. The system of claim 35 wherein the remote file server node delegates version control of the particular file to a version control node.

40. The system of claim 39 wherein a particular client node requests confirmation that at least a part of a particular copy of the particular file is the most updated version of the respective part of the particular copy of the file, and

wherein the particular client node accesses the part of the particular copy of the particular file only if permitted by the version control node.

41. The system of claim 40 wherein the particular client node stores the part of the particular copy in a storage device which is physically located locally to the particular client node.

42. The system of claim 40 wherein the particular client node issues a request to the remote file server node to confirm that at least a part of the particular file is the most updated version, and

wherein the remote file server node, in response to determining that the one file is the particular file, forwards the message to the version control node.

43. The system of claim 42 wherein the particular client node, in response to receiving a response from the version control node, issues further messages pertaining to version of the particular file directly from the particular client node to the version control node.

44. The system of claim 43 wherein in response to modifying the particular file, the particular client node issues to the version control node a version update message for the file indicating a recent update has occurred on the particular file.

45. The system of claim 39 wherein the version control node is also the access control node for the particular file.

46. The system of claim 35 wherein the remote file server node is also configured for selectively downloading from the remote file server node to the particular client node via the wide area network a copy of at least a most recently updated portion of a particular file to be accessed by the particular client node and which the particular client node lacks, while a particular client node is in communication with the remote file server node, wherein at all times, each client node in communication with the remote file server node adheres to explicit and implicit file sharing modes specified by the native file application programming interfaces.

47. A system for providing multi user file storage comprising:

a specific client node at an arbitrary geographic location, usable by a user of a pre subscribed user group for communicating with a remote file server node via a wide area network, the remote file server enabling each user of the pre subscribed user group to access files of a file group at the remote file server node via the respective client node in communication with the remote file server node via the wide area network, including permitting, when the pre-subscribed user group includes at least two users, more than one user of the pre subscribed user group to access the same file of the file group at the remote file server node simultaneously, and

an interface for adapting file access at the specific client node by designating at the specific client node each accessible file of the file group as stored on a virtual storage device, and enabling access to the designated files in a fashion which is indistinguishable, by users of, and applications executing at, the specific client node, with access to one or more files stored on a physical storage device that is locally present at the specific client node, and

wherein the remote file server node is also for delegating both privileged rights access control and file sharing mode access control to a particular file of the group of files to one or more distributed nodes other than the remote file server node which provides the data, such that access to the particular file maintained at the remote file server node occurs on a most up to date version of the particular file.

48. The system of claim 47 wherein a particular client node requests access to one of the files of the group of files, and

wherein if the one file is the particular file, accessing the particular file at the particular client node only if permitted by the access control node.

49. The system of claim 48 wherein the particular client node issues the request to the remote file server node, and

wherein the remote file server node forwards the request to the access control node in response to determining that the one file is the particular file.

50. The system of claim 49 wherein the particular client node, in response to receiving a response from the access control node, issues further messages pertaining to the access of the particular file directly from the particular client node to the access control node.

51. The system of claim 47 wherein the remote file server node delegates version control of the particular file to a version control node.

52. The system of claim 51 wherein a particular client node requests confirmation that at least a part of a particular copy of the particular file is the most updated version of the respective part of the particular copy of the file, and

wherein the particular client node accesses the part of the particular copy of the particular file only if permitted by the version control node.

53. The system of claim 52 wherein the particular client node stores the part of the particular copy in a storage device which is physically located locally to the particular client node.

54. The system of claim 52 wherein the particular client node issues a request to the remote file server node to confirm that at least a part of the particular file is the most updated version, and

wherein the remote file server node, in response to determining that the one file is the particular file, forwards the message to the version control node.

55. The system of claim 54 wherein the particular client node, in response to receiving a response from the version control node, issues further messages pertaining to version of the particular file directly from the particular client node to the version control node.

56. The system of claim 55 wherein in response to modifying the particular file, the particular client node issues to the version control node a version update message for the file indicating a recent update has occurred on the particular file.

57. The system of claim 56 wherein the version control node is also the access control node for the particular file.

58. A system for providing multi user file storage comprising:

a remote file server node for enabling each user of a pre subscribed user group of one or more users operating an arbitrary client node at an arbitrary geographic location to communicate with a remote file server node via a wide area network,

a storage device at the remote file server node for enabling each user of the pre subscribed user group to access files of a file group at the remote file server node via the respective client node in communication with the remote file server node via the wide area network, including permitting, when the pre-subscribed user group includes at least two users, more than one user of the pre subscribed user group to access the same file of the file group at the remote file server node simultaneously, and

a particular client node,

wherein the remote file server node is also configured for transferring an encrypted key from the remote file server node to a particular client node via a secure channel, the encrypted key being encrypted using an encryption function not known locally at the remote file server node, the key being decryptable using a decryption function not known locally at the remote file server node, the decryption function being also not known locally at any other client node usable by others of the pre subscribed user group,

wherein the particular client node is also configured for decrypting the transferred key at the particular client node, and for using the key at the particular client node to decrypt information of a file downloaded from the remote file server node or to encrypt information of a file prior to uploading for storage at the remote file server node, and

wherein the remote file server node is also for delegating both privileged rights access control and file sharing mode access control to a particular file of the group of files to one or more distributed nodes other than the remote file server node which provides the data.

59. The system of claim 58 wherein a particular client node requests access to one of the files of the group of files, and

wherein if the one file is the particular file, accessing the particular file at the particular client node only if permitted by the access control node.

60. The system of claim 59 wherein the particular client node issues the request to the remote file server node, and

wherein the remote file server node forwards the request to the access control node in response to determining that the one file is the particular file.

61. The system of claim 60 wherein the particular client node, in response to receiving a response from the access control node, issues further messages pertaining to the access of the particular file directly from the particular client node to the access control node.

62. The system of claim 58 wherein the remote file server node delegates version control of the particular file to a version control node.

63. The system of claim 62 wherein a particular client node requests confirmation that at least a part of a particular copy of the particular file is the most updated version of the respective part of the particular copy of the file, and

wherein the particular client node accesses the part of the particular copy of the particular file only if permitted by the version control node.

64. The system of claim 63 wherein the particular client node stores the part of the particular copy in a storage device which is physically located locally to the particular client node.

65. The system of claim 63 wherein the particular client node issues a request to the remote file server node to confirm that at least a part of the particular file is the most updated version, and

wherein the remote file server node, in response to determining that the one file is the particular file, forwards the message to the version control node.

66. The system of claim 65 wherein the particular client node, in response to receiving a response from the version control node, issues further messages pertaining to version of the particular file directly from the particular client node to the version control node.

67. The system of claim 66 wherein in response to modifying the particular file, the particular client node issues to the version control node a version update message for the file indicating a recent update has occurred on the particular file.

68. The system of claim 62 wherein the version control node is also the access control node for the particular file.