Gateway-assisted file transfer
View Patent ↗A file transfer application maintains a secure connection over the Internet with a file transfer gateway. A user selects a file and the file transfer application requests a unique ticket from the gateway. The ticket is stored in both the gateway and the file transfer application. Next, the ticket is then encoded in a URL that can be sent to potential recipients of the file via conventional methods. Upon entering the URL into a web browser, the recipient will navigate to the file transfer gateway. The gateway decodes the URL to recover the ticket and looks up the ticket in the database to determine the associated application instance and file description. The gateway will then request the application instance to start encrypting and streaming the contents of the file identified by the ticket to the gateway, which then retransmits the encrypted stream to the recipient's web browser.
1. Apparatus to control transfer of a file from a first computer to a second computer, the first computer having a file transfer application instance, comprising:
a processor;
computer memory holding computer program instructions that when executed by the processor perform a method, the method comprising:
establishing and maintaining a connection to the first computer;
upon receipt of a request from the first computer, the request associated with a file to be transferred to the second computer, associating a random character string with an identifier associated with the file transfer application instance and data associated with the file;
storing the random character string together with the identifier associated with the file transfer application instance and the data associated with the file;
providing the random character string to the first computer, the random character string provided over the connection;
upon subsequent receipt of a request from the second computer, the request associated with a URL that encodes at least the random character string, de-referencing the URL by extracting the random character string and using it to identify the file and the file transfer application instance; and
providing an instruction to the file transfer application instance to enable a transfer of the file from the first computer to the second computer.
2. The apparatus as described in claim 1 wherein the method further includes:
receiving the file over the connection; and
forwarding the file to the second computer, wherein, during the file transfer, at least one of the first and second computers does not accept incoming Internet connections.
3. The apparatus as described in claim 2 wherein the file is forwarded without being cached or stored in the apparatus.
4. The apparatus as described in claim 2 wherein the file is received from the first computer and forwarded to the second computer in a protected format.
5. The apparatus as described in claim 4 wherein the file is received from the first computer and forwarded to the second computer using an Internet Protocol transport protocol.
6. The apparatus as described in claim 1 wherein the random character string also is associated with metadata describing the file.
7. The apparatus as described in claim 1 wherein the URL is de-referenced upon receipt of an identifier associated with a permitted user of the second computer.
8. The apparatus as described in claim 1 wherein the file is a given file in a folder on the first computer.
9. The apparatus as described in claim 8 wherein the method further includes receiving a request from the second computer to access the given file in the folder.
10. The apparatus as described in claim 9 wherein the method further includes providing instructions to the first computer to initiate a transfer of the given file in the folder from the first computer.
11. The apparatus as described in claim 1 wherein the connection is an HTTPS connection.
12. The apparatus as described in claim 1 wherein the URL also encodes a second URL associated with a location of the apparatus.
13. The apparatus as described in claim 1 wherein the method further includes verifying the connection to the first computer prior to providing the instruction.
14. The apparatus as described in claim 1 wherein the instruction includes a name of the file.