| 摘要 |
A method for establishing a secure communications data stream between two remote computers for the immediate and direct transfer of an encrypted data file without the need for either of the remote computers to establish a server style inbound listening connection. The data stream is managed by a central server which can dynamically determine if the recipient computer is currently on-line and available to receive the connection. If so, the data is streamed between the sender and the recipient through the central server to allow control and status tracking information to be maintained but without any of the data being stored on the central server. If the recipient computer is not on-line, the central server stores the (encrypted) data for immediate delivery once the recipient computer comes on-line. X.509 certificates may be used to create a session key used for the encrypted file transfer. Digital signatures for the file may also be used to verify correct receipt of the file by the recipient and to generate a return signature to provide proof of delivery to the sender. Notifications may also be used such that the sender client notifies the server of the desire to send a file to the recipient peer and sends the file when the recipient peer has indicated that it is ready to receive the file.
|
