Advanced security protocol for broadcasting and synchronizing shared folders over local area network

1. A method comprising:

sending, by a first client device on a local area network, an announcement message to a second client device on the local area network, the announcement message comprising a first secure identifier that uniquely identifies a shared content item associated with one or more user accounts on a content management system, the first secure identifier being generated by the first client device using a shared secret key;

receiving, by the first client device on the local area network, a synchronization message requesting to synchronize local copies of the shared content item stored on the first client device and the second client device, the synchronization message comprising a second secure identifier that uniquely identifies at least one of the second client device or the shared content item, the first secure identifier and the second secure identifier being both based on the shared secret key;

based on the first secure identifier and the second secure identifier, verifying, by the first client device, that the second client device is authorized to access the shared content item; and

synchronizing, by a connection over the local area network between the first client device and the second client device, the local copies of the shared content item stored on the first client device and the second client device.

2. The method of claim 1 , wherein sending the announcement message comprises broadcasting the announcement message over the local area network.

3. The method of claim 1 , further comprising:

receiving, by the first client device, the shared secret key from the content management system, the shared secret key being associated with the shared content item.

4. The method of claim 3 , wherein the first secure identifier is generated further based on at least one of a namespace identifier or a cryptographic nonce uniquely generated for the announcement message.

5. The method of claim 3 , wherein verifying that the second client device is authorized to access the shared content item comprises:

comparing the first secure identifier and the second secure identifier in the synchronization message; and

identifying a match between the first secure identifier and the second secure identifier.

6. The method of claim 1 , wherein a local copy of the shared content item is stored and available at the first client device, and wherein the announcement message provides an indication that the local copy of the shared content item is stored and available at the first client device, the indication being based on the first secure identifier.

7. The method of claim 1 , wherein the first secure identifier is further generated based on at least one of a namespace identifier or a cryptographic nonce uniquely generated for the announcement message, and wherein the announcement message is associated with one or more user accounts on the content management system.

8. A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to:

send, by a first client device on a local area network, an announcement message to a second client device on the local area network, the announcement message comprising a first secure identifier that uniquely identifies a shared content item associated with one or more user accounts on a content management system, the first secure identifier being generated by the first client device using a shared secret key;

receive, by the first client device on the local area network, a synchronization message requesting to synchronize local copies of the shared content item stored on the first client device and the second client device, the synchronization message comprising a second secure identifier that uniquely identifies at least one of the second client device or the shared content item, the first secure identifier and the second secure identifier being both based on the shared secret key;

based on the first secure identifier and the second secure identifier, verify, by the first client device, that the second client device is authorized to access the shared content item; and

synchronize, by a connection over the local area network between the first client device and the second client device, the local copies of the shared content item stored on the first client device and the second client device.

9. The non-transitory computer-readable medium of claim 8 , wherein sending the announcement message comprises broadcasting the announcement message over the local area network.

10. The non-transitory computer-readable medium of claim 8 , the instructions, when executed by the one or more processors, further cause the one or more processors to:

receive, by the first client device, the shared secret key from the content management system, the shared secret key being associated with the shared content item.

11. The non-transitory computer-readable medium of claim 10 , wherein the first secure identifier is generated further based on at least one of a namespace identifier or a cryptographic nonce uniquely generated for the announcement message.

12. The non-transitory computer-readable medium of claim 10 , wherein verifying that the second client device is authorized to access the shared content item comprises:

comparing the first secure identifier and the second secure identifier in the synchronization message; and

identifying a match between the first secure identifier and the second secure identifier.

13. The non-transitory computer-readable medium of claim 8 , wherein a local copy of the shared content item is stored and available at the first client device, and wherein the announcement message provides an indication that the local copy of the shared content item is stored and available at the first client device, the indication being based on the first secure identifier.

14. The non-transitory computer-readable medium of claim 8 , wherein the first secure identifier is further generated based on at least one of a namespace identifier or a cryptographic nonce uniquely generated for the announcement message, and wherein the announcement message is associated with multiple user accounts on the content management system.

15. A method comprising:

receiving, by a first client device on a local area network, an announcement message sent by a second client device on the local area network, the announcement message comprising a first secure identifier that uniquely identifies a shared content item associated with one or more user accounts on a content management system, the first secure identifier being generated by the first client device using a shared secret key;

based on the announcement message, determining, by the first client device, that the second client device has a local copy of the shared content item;

sending, by the first client device to the second client device on the local area network, a synchronization message requesting to synchronize the shared content item between the first client device and the second client device, the synchronization message comprising a second secure identifier that uniquely identifies at least one of the first client device or the shared content item, the first secure identifier and the second secure identifier being both based on the shared secret key; and

synchronizing, via a connection over the local area network between the first client device and the second client device, the shared content item between the first client device and the second client device.

16. The method of claim 15 , wherein the first secure identifier is further generated based on at least one of a namespace identifier or a cryptographic nonce, wherein the cryptographic nonce is uniquely generated for the announcement message and the shared secret key is associated with the shared content item.

17. The method of claim 16 , further comprising:

receiving, by the first client device, the shared secret key from the content management system; and

generating the second secure identifier using the shared secret key.

18. The method of claim 17 , wherein determining that the second client device has the local copy of the shared content item comprises:

comparing the first secure identifier in the announcement message and the second secure identifier generated by the first client device; and

identifying a match between the first secure identifier and the second secure identifier.

19. The method of claim 15 , synchronizing the shared content item between the first client device and the second client device comprises synchronizing the shared content item directly between the first client device and the second client device.

20. The method of claim 15 , wherein the synchronization message comprises at least one of a peer identifier associated with the first client device, an expiration time, or a cryptographic nonce.