WO2008119273A1 - Method for releasing and downloading file, management server, terminal and system - Google Patents

Abstract

A method for releasing a file is provided. The method includes that a terminal used for providing a downloadable file transmits the first message to the first server, the first message carrying a file name of the downloadable file and identifiers of at lest one user allowed to download; the first server obtains a network connection information of the terminal; the first server memories information of downloadable files, including a file name, network connection information of network and identifiers of at lest one user allowed to download. A method for downloading a file is provided. The method includes that the first server transmits a first message to the second terminal, the first message carrying a file name of the downloadable file and corresponding network connection information of the first terminal; the second terminal downloads the downloadable file from the first terminal based on the network connection information of the first terminal. A system, management server and terminal corresponding to the releasing and downloading method are provided. A controllable share for files is realized by the scheme.

Description

 File publishing and downloading methods, management server, terminal and system

TECHNICAL FIELD The present invention relates to the field of internet file sharing, and more particularly to a method, system, server, and terminal for file sharing. BACKGROUND OF THE INVENTION As an important complement to the client/server model, Peer-to-Peer (P2P) technology has become increasingly popular on the Internet in recent years. A P2P network is a distributed network in which users share some of the resources (processing power, storage capacity, network connectivity, printers, files, etc.) owned by their computers. These shared resources can be directly accessed by other users without the need of a network. After the intermediate entity. In this network, the user can be either a resource provider (Server) or a resource acquirer (Client), so the user is a peer-to-peer relationship. P2P technology makes full use of a large number of computer resources at the edge of the network, including distributed storage space, CPU time, information content and other resources, thereby effectively reducing the load on centralized servers and improving the availability of services.

 Each user is abstracted as a node in the network. Each node in the P2P network is logically equivalent. That is, the server and the client are no longer clearly distinguished in the system, and data can be directly transmitted between the nodes in the system without Need to pass the intermediate server. The peer-to-peer weakening of the P2P model even removes the dependence of the distributed nodes on the centralized server, breaking through the bottleneck of the server and enhancing the scalability of the network.

With the rapid development of P2P technology, P2P file sharing has now gained widespread popularity and application. According to CacheLogic, a provider of traffic management and analytics solutions from the world's leading Internet Service Provider (ISP), in January 2006, Ptorrent downloads such as Bittorrent (BT download software), eDonkey (Electronics), Gnutella, etc. The network traffic generated by the software has already occupied 71% of the bandwidth of the entire Internet. With this type of software, people can easily access shared files distributed globally. Integrate the sharing of such software The characteristics of file management and maintenance, most of them use the management server or use the super node as the centralized management node, and the network has a centralized/semi-distributed structure.

 The user is connected to the management server and can be a shared user and a download user. The role distinction is valid only in the one-way process of sharing or downloading. A shared user can also be a download user of their non-shared content. For example, the operation flow chart of the file sharing system shown in Figure 1:

 Step 101 and step 102 are the publishing process of the shared file:

 Step 101: The shared user sends the shared information to the management server, where the shared information includes: shared user network connection information of the shared file, file name, file size, and file summary (refers to a fixed length of data obtained by processing the file according to a standard algorithm) Regardless of the file, the digests obtained when using the same message digest algorithm are fixed-length (for example, 128 bits), and the digests obtained by different files have the same probability of being very small, so they can be used as file identifiers. Common algorithms For example, MD5, SHA, etc. In the P2P file download, the function of using the file digest is to perform verification, and the obtained file is obtained by the message digest algorithm, and then compared with the published digest, it can be judged whether the downloaded file is transmitted. Error), file fragmentation information, release time of shared files, etc.

 Step 102: The management server saves the shared information published by the shared user in an appropriate data structure.

 Steps 103 to 106 are the download process of the shared file:

 Step 103: The download user initiates a shared file query request to the management server, where the request includes the file name of the shared file.

 Step 104: The management server local query obtains shared user network connection information of one or more shared files.

 Step 105: The management server feeds back to the download user the shared user network connection information of the one or more shared files.

 Step 106: The download user establishes a connection with one or more shared users and starts sharing file transfers. The process specifically sends a download request to one or more shared users, and one or more shared users feed back a connection request to start sharing file transfers.

However, this sharing mechanism has no user management and control mechanism, so the shared file can be Query and download from any user connected to the management server. In order to achieve a small range of P2P file sharing and downloading, users can now set up their own private non-public intra-group servers by means of some public P2P platforms. Each member of the group will have its client's

The P2P access server address is set to a private, non-public intra-group server address, thus establishing a specific group of P2P sharing platforms. The operation process is basically the same as the process shown in FIG. 1, except that the members in the group are required to preset a private non-public intra-group server address, and the sharing and downloading process will not be described here.

 In summary, the prior art has built a private server so that users outside the group cannot know the existence of the private server. However, the prior art also has the following problems:

 Effective sharing control is still not possible within its members, for example in member internal users

A only wants to share files with users B and C. This method is still not implemented. Therefore, the existing technology only realizes the controllability of file sharing in a certain sense, and does not really implement the file sharing mode controlled by the user.

 In addition, the user needs to set up the server by himself, which brings hardware or system overhead to the user. SUMMARY OF THE INVENTION The present invention provides a file publishing and downloading method, a file sharing system, a management server, and a terminal. The main technical solutions are as follows:

 The present invention provides a file publishing method, the method comprising the following steps: a terminal for providing a downloadable file sends a first message to a first server, the first message carrying a file name of the downloadable file and at least one allowed to be downloaded The identifier of the user; the first server acquires network connection information of the terminal;

 The first server saves the information of the downloadable file, including: a file name, network connection information of the terminal, and an identifier of at least one user who is allowed to download.

The present invention also provides a file downloading method, in which the first server saves information of at least one downloadable file, including: a file name, network connection information of the first terminal providing the downloadable file, and at least one The identity of the user who is allowed to download; this method Includes the following steps:

 The first server sends a first message to the second terminal, where the user corresponding to the second terminal is allowed to download the downloadable file, and the first message carries the file name of the downloadable file and the network connection information of the corresponding first terminal;

 The second terminal downloads the downloadable file from the first terminal according to the network connection information of the first terminal.

 The present invention provides a system for implementing file sharing, the system comprising: at least one first terminal providing a downloadable file, configured to send a first message to a first server, the first message carrying a file name of the downloadable file And an identification of at least one user who is allowed to download;

 a first server, configured to acquire network connection information of the first terminal, and save information of the downloadable file according to the first message from the first terminal, including: a file name, network connection information of the user terminal that provides the downloadable file, at least one The identifier of the user who is allowed to download, and sends a second message carrying the file name of the downloadable file and the network connection information of the corresponding first terminal;

 And at least one second terminal requesting to download the file, configured to receive the second message from the first server, and download the downloadable file from the first terminal according to the network connection information of the first terminal carried by the received second message.

 The present invention provides a file management server, the server includes the following unit: an uploading unit, configured to receive a first message sent by a terminal that provides a downloadable file, and obtain network connection information of the terminal, where the first message carries a downloadable file a file name and an identification of at least one user who is allowed to download;

a policy library, configured to store information of the at least one downloadable file received by the uploading unit, including: a file name, network connection information of the terminal that provides the downloadable file, and an identifier of the at least one user that is allowed to download; a downloading unit, configured to receive a second message sent by the terminal that requests the download, where the second message carries the file name of the downloadable file and the identifier of the user requesting the download, and the query policy library, if the user requesting the download is allowed to download the file name corresponding to The downloadable file sends a message carrying the file name of the downloadable file and the network connection information of the corresponding terminal to the terminal requesting the download.

 The invention also provides a terminal, the terminal comprising the following units:

 a policy library, configured to save information of at least one downloadable file, including a file name of the downloadable file, and at least one identifier of a user who is allowed to download the downloadable file,

 The first unit is configured to send a first message to the first server, where the first message carries the file name of the downloadable file and the identifier of the at least one user that is allowed to download.

 It can be seen from the above technical solution that, in the embodiment of the present invention, the user can select which users to share the file, so that the management server only searches for the shared file information that is allowed to be downloaded by the user when searching for the download request information, thereby realizing the user-controlled File sharing method. BRIEF DESCRIPTION OF THE DRAWINGS Figure 1 is a flow chart showing the operation of a prior art file sharing system.

 FIG. 2 is a structural diagram of a system for implementing file sharing controllable according to the present invention.

 FIG. 3 is a flowchart of a shared file distribution according to Embodiment 1 of the present invention.

 FIG. 4 is a flow chart of issuing a shared file for adding a temporary key according to Embodiment 2 of the present invention.

 FIG. 5 is a flowchart of implementing a sharing invitation according to Embodiment 3 of the present invention.

 FIG. 6 is a flowchart of downloading a shared file according to Embodiment 4 of the present invention.

 FIG. 7 is a flowchart of downloading a shared file of a temporary key according to Embodiment 5 of the present invention.

 FIG. 8 is a schematic structural diagram of a management server for implementing file sharing control according to Embodiment 6 of the present invention.

FIG. 9 is a schematic structural diagram of a terminal for implementing file sharing controllable according to Embodiment 7 of the present invention. Mode for Carrying Out the Invention The embodiment of the present invention provides a P2P file sharing and downloading method and system with file access control function, and implements a sharing invitation mechanism on a controllable basis. The invention is achieved by the following embodiments:

 As described in the background, all users in the entire system can be either a user who downloads a shared file or a user who publishes a shared file, and the role distinction is valid only in the one-way process of sharing or downloading.

 The following describes the process of the user publishing the shared file. Referring to FIG. 2, it is a network system architecture diagram of the present invention; the system includes a login server 1, a management server 2, and a user terminal 3. The management server 2 is also configured with a global access control policy base (Global Access-control Policy Information Base), which is used to store the identity of all users and the information required by the corresponding user identifier in the sharing control, and has users in it. The management server is assisted in effective filtering when requesting to download the shared file; the user terminal 3 is configured to download the permission of the local access controller to the shared file. The network system architecture adds a login server based on the original centralized/semi-distributed structure. The login server is set up by the service provider and does not need to be set up by the user himself, and the login server can be used by all users.

 Embodiment 1 , see Figure 3, for the flow chart of the shared file:

 Step 301: The shared user terminal 1 sends the ID (identification) of the shared user 1 and the network connection information of the shared user 1 to the login server through the network.

 Step 302: The login server verifies whether the information is correct. If it is correct, the shared user 1 passes the verification, and sends the network connection information of the management server to the shared user terminal 1; if not, the process ends.

Step 303: The login server will share the ID of the user 1 and the shared user 1 network connection letter. The information is sent to the management server; the management server saves this information accordingly.

 Step 304: The shared user terminal 1 sends a file-sharing request message of the shared file A to the management server, where the message includes: a shared user identifier, a file name A of the shared file, and a file capable of downloading the shared file. User ID, such as User 2.

 In step 301 of this embodiment, the terminal sends the network connection information of the shared user 1 to the login server. In step 303, the login server forwards the network connection information to the management server. In other embodiments of the present invention, the network connection information of the shared user 1 may also be directly sent by the terminal to the management server in the sharing request message.

 Step 305: The management server receives the request, and correspondingly saves the shared file name A and the user identifier 2 capable of downloading the shared file by sharing the user identifier 1.

 In order to enable the user to flexibly control the publishing time of the shared file, when the sharing request message is sent, the shared file expiration date is further included; then, when the management server receives the information, the management server can only share the file within a prescribed period of time, exceeding The specified period of time cancels the sharing status of the file. Since most of the steps are the same as the above process, it will not be repeated here.

 In order to enhance security during the file sharing process, a temporary key can be generated by the login server after the shared user 1 authenticates by the login server. Corresponding to the function, the management server adds a temporary key set (Temporary Key Set). ), it is used to save all the temporary keys and to receive the temporary key sent by the user. The authentication is valid. The local access control policy library configured by the user terminal can also perform the risk certificate with the downloaded user through the temporary key.

 Embodiment 2, referring to FIG. 4 is a flow chart for issuing a temporary key:

 Step 401: The shared user terminal 1 sends the ID (identification) of the shared user 1 and the network connection information of the shared user 1 to the login server through the network.

Step 402: The login server verifies whether the information is correct. If it is correct, the user is shared. 1 Pass the verification and send the network connection information of the management server to the shared user terminal 1; if it is incorrect, the process ends.

 Step 403: The login server generates a temporary key to the shared user 1, and feeds back the temporary key to the shared user terminal 1.

 Step 404: The login server sends the ID of the shared user 1, the shared user 1 network connection information, and the temporary key of the shared user 1 to the management server; the management server saves the information correspondingly.

 Step 405: The shared user terminal 1 sends a shared file request message of the shared file A to the management server, where the message includes: a shared user identifier 1, a file name A of the shared file, and a user identifier 2 capable of downloading the shared file, and the shared user 1 Temporary key and shared file expiration date.

 Step 406: The management server verifies whether the temporary key is legal. If yes, the other information is correspondingly saved by using the shared user ID, and the file is set to the shared state within the validity period of the shared file.

 In order to further increase the privacy of the shared file request message transmission on the basis of increasing the security of the shared file, the shared user may use the temporary key to encrypt the shared file request message carrying the temporary key when the shared user 1 sends the sharing request; When the management server receives the shared file request sent by the shared user 1, the legality of the shared file request message carrying the temporary key is decrypted and then the risk of the temporary key is decrypted, and most steps are the same as in the above process. This is no longer exhaustive.

On the basis of implementing the controllable sharing of the shared file, the corresponding invitation module may be extended in the sharing management module to implement the information that the shared user sends an invitation to download to the downloading user. The function is implemented by creating a queue for each user ID. Each element in the queue includes an inviter that provides content and sends a sharing invitation, that is, a shared user ID, and also includes a shared user network connection address of the associated shared file. . This queue only saves the invitation event to be sent. Once a sharing invitation is sent to the invited user, the invitation event is removed from the queue. That is to say, if the invited user is online, the invitation will be received, and the invitation will be deleted from the queue. If the online management server is not online, the invitation will be saved until the user goes online and then the invitation is distributed and deleted from the queue; Or you can set a certain time limit. When the invited user is offline, the management server automatically deletes the invitation from the queue when the invitation exceeds a certain limit.

 Embodiment 3, Referring to FIG. 5, the method for implementing the sharing invitation is as follows:

 Step 501: The shared user terminal 1 sends the ID (identification) of the shared user 1 and the network connection information of the shared user 1 to the login server through the network.

 Step 502: The login server verifies whether the information is correct. If the user is correct, the shared user 1 passes the verification, and sends the network connection information of the management server to the shared user terminal 1; if not, the process ends.

 Step 503: The login server generates a temporary key for the shared user 1, and feeds back the temporary key to the shared user terminal 1.

 Step 504: The login server sends the shared user ID, the shared user 1 network connection information, and the temporary key of the shared user 1 to the management server; the management server saves the information correspondingly.

 Step 505: The shared user terminal 1 sends a shared file request message of the shared file A to the management server, where the message includes: a shared user identifier, a file name A of the shared file, and a user identifier 2 capable of downloading the shared file, and the shared user 1 Temporary key and shared file expiration date; simultaneously send invitation download information carrying the invitation to download the user ID.

 The user terminal 1 may also send the invitation download information when the shared file is published, and may send the file carrying the file name A of the shared file and the invited user identifier at any time within the expiration date of the shared file, inviting the user to download the share. file.

Step 506: The management server verifies whether the temporary key is legal; if yes, by sharing The user ID saves other information correspondingly, sets the file to be in the shared state within the expiration date of the shared file, and determines whether the invitation downloading user carried in the invitation downloading information is online, sends the invitation downloading information to the online invitation downloading user, and simultaneously sends the sharing. The file name, the shared user network connection information, and the shared user identifier are deleted, and the invitation download information is deleted after being sent; the user ID is downloaded, and the shared file name, the shared user network connection information, and the shared user identifier are saved correspondingly; During the preset expiration date, when the user who invites the download is online, it is sent to the user terminal that invites the download, and the saved invitation download information is deleted.

 The above describes the process of publishing shared files. The following describes the download process of shared files:

 Embodiment 4 Corresponding to the publishing process of Embodiment 1, the downloading process is shown in FIG. 6: Step 601: Downloading the user terminal 2 sends the ID (ID) of the downloading user 2 and the downloading user 2 network connection information to the login server through the network.

 Step 602: The login server verifies that the information is correct, and if correct, downloads the user.

2 By verifying and feeding back to the download user terminal 2, the management server network connection information is incorrect, and the process is terminated.

 Step 603: The login server sends the ID of the download user 2 and the download user 2 network connection information to the management server; the management server saves the information correspondingly.

 Step 604: The download user terminal 2 sends a file-downloading request message of the shared file A to the management server, and the message includes: downloading the user identifier 2, the file name A of the shared file, which is very common to those skilled in the art. It is easy to infer that the shared file name A in the download request message can also be any information that can identify the shared file, such as a keyword or file identifier of the file name.

Step 605: The management server receives the request, and finds information that is allowed to be downloaded by the user. The search message is sent to the download user 2, and the message includes: a shared file name A, a user identifier 1 of the shared file A, and a network of the shared user 1. Connection information. Step 606: The download user terminal 2 transmits a download request carrying the shared file name A to the shared user 1, and the shared user 1 transmits the shared file A to the download user 2 in response to the request.

 Embodiment 5: Corresponding to Embodiment 2, the local access control policy library configured by the user terminal can further carry out further identity insurance for the user who requests the download through the temporary key, thereby enhancing security. See Figure 7 for a flowchart for adding a temporary key download:

 Step 701: The download user terminal 2 sends the ID of the download user 2 and the download user 2 network connection information to the login server through the network.

 Step 702: The login server verifies whether the information is correct. If it is correct, the download user 2 passes the verification and feeds back to the management server network connection information, and if not, the process ends.

 Step 703: The login server generates a temporary key for the download user 2, and feeds back the temporary key to the shared user terminal 2.

 Step 704: The login server sends the ID of the download user 2, the shared user 2 network connection information, and the temporary key of the shared user 2 to the management server; the management server saves the information correspondingly.

 Step 705: The shared user terminal sends a download file request message of the shared file A to the management server, and the message includes: downloading the user identifier 2. The file name A of the shared file.

 Step 706: The management server receives the request, and finds information that is allowed to be downloaded by the user. The search message is sent to the download user 2, and the message includes: a shared file name A, a user identifier of the shared file A, and a network sharing the user 1. The connection information and the temporary key of the shared user 1.

 Step 707: The download user terminal sends a download request carrying the shared file name A to the shared user 1, and also includes the temporary key of the shared user 1 obtained by the download user 2.

 Step 708: The shared user terminal 1 transmits the shared file A to the download user 2 after the temporary key certificate issued by the download user 2 is successful.

Further increase the privacy of the shared file security, you can After receiving the temporary key, the user 2 encrypts the temporary key; when the shared user 1 receives the download request sent by the download user 2, the temporary key is decrypted and then the validity of the temporary key is verified, since most The steps are the same and will not be repeated here.

 Embodiment 6, corresponding to Embodiment 3, the downloading process when the downloading user receives the invitation downloading information is as follows:

 Step 801: After the login is authenticated by the login server, it is determined whether the invitation download information is received, and the invitation download information includes: a shared user identifier 1, a shared file name A, a shared user 1 network connection information, and the like; ; If yes, go to step 803.

 Step 802: Continue to perform regular information interaction with the management server.

 Step 803: Ignore the request or establish a connection with the shared user terminal 1 to download the shared file. If the shared user 1 is offline or the shared user terminal 1 has not shared the file A at this time, the management server can return to the shared user 2 another user who has a copy of the shared file A and allows access thereto.

 The establishment of the connection described in this step may be a relatively complicated process, such as decryption, description, and no further description here.

In the embodiments 4 to 6, after the download user 2 downloads the shared file A, the management server may further feed back the management server, and the management server further adds the download user identifier 2, the download user network connection information, and the shared file name A to the shared file A. User information; or in the process of downloading the shared file A by the downloading user 2, the downloading user identifier 2, the downloading user network connection information, the shared file name A, and the download progress are fed back to the management server. After receiving the above feedback, the management server notifies the other users who download the file A. Other downloaded users can connect to the download user 2 to download the shared file A through the network connection information saved by the management server, thereby improving the download speed of other download users. This allows the same file to have a succession in the shared control strategy. And after the download user downloads the shared file, the shared file can be Set to shared state for other users to download. The download user can further feed back to the management server the user ID that is allowed to be accessed. For example, after the download user 2 downloads the shared file, the downloaded file can be downloaded to the user terminal where the user 2 is located, that is, the shared file.

A copy of A is set to the shared state, and feedback to the management server is able to download the user ID of copy B, which further enhances the inheritance of file controllable sharing.

 In order to improve the control function of the shared file, the user can also perform the unshared operation on the shared file: for example, the shared user 1 authenticates by logging in to the server, and the login server sends the user identifier and the user network connection information to the management server for saving, and then shares the user. 1 Sending a Share-Revoking Message to the management server, the information includes: a shared file name and a shared user identifier; after receiving the unshared message, the management server unshares the corresponding file. After the temporary key is added, the operation of canceling the sharing can be changed according to Embodiment 2, and will not be described here.

 In order to improve the control of shared files, users can also perform statistics on shared files:

 The user authenticates by logging in to the server. After the login server sends the user ID and the user network connection information to the management server for storage, the user sends a statistics request to the management server for the shared file.

 The management server collects all available shared file information shared by the user ID and gives feedback to the user. The available shared information includes available connection information after other users have downloaded the file. That is to say, in addition to the user identifier and network connection information that originally shared the shared file, the shared information may include other network connection information and user identifier of the user who downloaded the file.

When the user logs in on multiple terminals, it is possible that the shared file is placed on the terminal that is not currently logged in, causing other users to fail to download the shared file according to the network connection information when the user issues the shared file. And if similar invalid network connection information increases, Will affect the efficiency of user downloads. Through the method of sharing available files provided by the present invention, the user can clearly understand which network connection information of the shared file is valid, and the network connection information of the shared files is invalid, but the network connection information of the copy is still valid, so that the user can take the initiative. Cancel shared files that have no valid network connection information, improving the efficiency of sharing. Moreover, by counting the shared files, the user can further strengthen the control and management of the shared files, such as increasing or decreasing the user ID of the downloadable shared file, or inviting other users to download the shared file.

 The above method of distributing shared files and downloading shared files is implemented in the network system architecture as shown in the figure. The function of the system of the embodiment of the present invention will now be described.

 The login server 1 is configured to store all user identifiers; receive the user identifier sent by the user terminal 2, verify whether the user identifier is legal, and if yes, send the user identifier and the user network connection information to the management server 2; and manage the server network connection information. Send to user terminal 2.

 The management server 2 is configured to save the user identifier sent by the login server 1 and the user network connection information; receive and share the sharing request message sent by the user, where the message includes: a file name of the shared file and a user identifier capable of downloading the shared file; Receiving a request download message sent by the user, the message carrying the file name of the file to be downloaded and the user identifier; after receiving the request to download the message, searching for the information that the user is allowed to download, and sending the response message to the downloading user after searching The message includes: a shared file name, a user ID that shares the file, and network connection information.

 The user terminal 3 is configured to send a user identifier to the login server 1; send the sharing request message or request a download message to the management server 2; receive a download request sent by another user terminal, and transmit the shared file to other user terminals.

In order to improve the security of the system, the function of the temporary key is added. Therefore, the login server 1 is further used on the basis of the above functions to correspond to the user identifier after receiving the user identifier. A temporary key is generated; and the temporary key is transmitted to the user terminal 3 and the management server 2. The management server 2 further saves the temporary key on the basis of the above function; after receiving the temporary key sent by the user terminal and the sharing request message, confirming the local presence and the temporary key sent by the received user terminal The sharing request message is saved after the same temporary key; when the response message is sent to the user terminal, the method further includes: sharing the temporary key of the file user.

 The user terminal 3 is further configured to receive the temporary key sent by the login server and save the user terminal 3 on the basis of the foregoing function; send the temporary key while transmitting the sharing request message to the management server 2; When the terminal sends the download request, the temporary key of the other user is further included; when the download request including the temporary key sent by another user is received, the shared file is transmitted to other user terminals after passing the key insurance.

 In order to enable the user to obtain shared file information in time, the management server 2 adds an invitation module.

 Therefore, the user terminal 3 is further configured to: when the sharing request message is sent to the management server 2, the invitation downloading information carrying the downloaded user identifier is also sent; after the user identifier of the login server 1 is verified, it is determined whether the invitation downloading information is received. The information includes the shared file name of the invitation download, the shared user network connection information, and the shared user identifier; if not received, the download user performs regular information interaction with the management server; if received, establishes a connection with the shared user to download the shared file or ignore the invitation. After downloading the information, the download user performs regular information interaction with the management server.

The invitation module of the management server 2 is configured to determine, when the sharing request message is saved, whether the user who invited the download is online, and send the invitation downloading information carrying the shared file name, the shared user network connection information, and the shared user identifier to the online invitation downloading user. Downloading the user ID of the offline invitation and saving it corresponding to the invitation download information; and sending the user who invites the download to the user within the preset validity period, and deleting the save The invitation to download the information.

 In order to further improve the function of the file controllable system, the function of canceling some or all of the files shared by the user is added.

 Therefore, the user terminal 3 is further configured to: after the management server saves the user identifier sent by the login server and the user network connection information, send a cancel sharing message to the management server, where the message includes: a shared file name and a shared user identifier.

 The global access control policy library of the management server 2 is further configured to search for the shared file after receiving the unshared message, cancel the sharing of the file, and delete the shared information of the file. It is also possible to delete not only the shared file entry of the shared user but also the shared file entry of the other user who shared the file by default by downloading the file, that is, the shared copy of the other user is also canceled. This is also derived from the inheritance of shared messages.

 In order to further improve the function of the file controllable system, the function of the user to share the shared file information is also added. The statistics here refer to the basic information of all the files shared by the user, including those shared and shared on other machines, and the availability of each file. This article proposes the sharing of the user login mode, so it is assumed that user A has logged in on one computer and shared a file of that computer. When user A logs out and logs in on another computer, he can still view it. The basic information such as the file name shared previously, but because the user terminal changes, the user A himself cannot actually read the file that was shared. However, if another user B downloads the file during user A's last share, and the user B is online at this time, user A and other users can still access the files on the other computers that were last shared. . Here, B is both a service consumer (downloading file usage) and a service provider (which serves to extend the availability and transit of files). In response to A's statistics, the management server still considers the file available and tells A.

Therefore, the user terminal 3 is further used by the management server 2 to save the login server. After the user identifier is connected to the user network, the user is sent a request to the management server to collect the shared file identifier.

 The management server 2 is further configured to: after receiving the statistical request, collect statistics about all available shared files shared by the user identifier, and feed back the information to the user terminal 1.

 Embodiment 6, Referring to FIG. 8, an implementation of the present invention provides a file management server including an uploading unit 902, a downloading unit 903, and a policy library 901.

 The uploading unit 902 is configured to receive the first message sent by the terminal that provides the downloadable file, where the first message carries network connection information of the terminal, a file name of the downloadable file, and an identifier of at least one user that is allowed to be downloaded. The policy library 901 is configured to store information of the at least one downloadable file received by the uploading unit 902, including: a file name, network connection information of the terminal providing the downloadable file, and an identifier of at least one user allowed to download. The download unit 903 is configured to receive the second message sent by the terminal requesting the download. The name of the file carrying the downloadable file in the second message and the identifier of the user requesting the download. The downloading unit 903 queries the policy library 901, and if the user requesting the download is allowed to download the downloadable file corresponding to the file name, sends a message carrying the file name of the downloadable file and the network connection information of the corresponding terminal to the terminal requesting the download. .

The identifier of the user who issues the downloadable file may further be carried in the first message received by the uploading unit 902. The policy library 901 may be further configured to save an identifier of a user who publishes the downloadable file; wherein, the identifier of each user who issues the downloadable file corresponds to information of the at least one downloadable file. The file management server may further include an invitation unit 904. The invitation unit 904 is configured to receive a third message carrying the identity of the user invited to download. The third message carries the identifier of the user who is invited to download and the file name of the downloadable file. The inviting unit 904 searches the policy library 901 for the information of the downloadable file corresponding to the file name of the downloadable file, and sends the file name carrying the downloadable file and the user who issues the downloadable file to the user who is invited to download when the user is online. Identify and publish downloadable files The message of the network connection information of the terminal corresponding to the user.

 The policy library 901 is further configured to set the downloadable file corresponding to the file name carried by the first message to a shared state, and cancel the set sharing state according to the indication. The management server may further include a sharing cancellation unit 905. The sharing cancellation unit 905 is configured to receive the fourth message sent by the terminal. The fourth message includes the file name and the identity of the user who posted the downloadable file. The sharing cancel unit 905 searches the policy library 901 for a downloadable file corresponding to the file name and the identifier of the user who posted the downloadable file, instructing the policy library 901 to cancel the sharing state of the downloadable file.

 The management server further includes a statistics unit 906. The statistic unit 906 is configured to receive a statistical request for carrying the identifier of the user sent by the terminal. The statistic unit 906 queries the policy library 901, and counts all downloadable files with available network connections in the downloadable file that the user corresponding to the user's identifier corresponds to, and sends the statistics to the terminal.

 The management server also includes a password set 907. The password set 907 is configured to receive the temporary key sent by the login server and the terminal, and verify whether the temporary key sent by the terminal is legal. If it is legal, the policy database 901 is saved to save the network connection information of the terminal that can download the file, and the file of the downloadable file. And the identifier of the at least one user who is allowed to download, and sends a message carrying the temporary password to the terminal requesting the download.

 Embodiment 7 Referring to FIG. 9, an embodiment of the present invention provides a terminal. The terminal includes a policy library 1001 and a first unit 1002.

 The policy library 1001 is used to save information of at least one downloadable file. This information includes the file name of the downloadable file and the identity of at least one user who is allowed to download the downloadable file. The first unit 1002 is configured to send the first message to the first server. The first message carries the network connection information of the terminal, the file name of the downloadable file, and the identifier of at least one user who is allowed to download.

The terminal further includes a second unit 1003. The second unit 1003 is for the second The server sends a message carrying the identifier of the user corresponding to the terminal to perform identity verification, and receives a message returned by the second server that carries the network connection information of the first server. At this time, the policy library 1001 is further configured to save the network connection information of the first server received by the second unit 1003. The first unit 1002 is configured to send the first message to the first server according to the network connection information of the first server saved by the policy library 1001.

 The terminal may further include a third unit 1004. The third unit 1004 is configured to receive a message carrying the temporary key returned by the second server. At this time, the policy library 1001 is further used to save the temporary key received by the third unit 1004. The first unit 1002 is further configured to further carry the temporary key saved by the policy library 1001 in the first message sent to the first server for validity verification.

 The terminal may further include a fourth unit 1005. The fourth unit 1005 is configured to receive a message carrying a temporary key request to download the downloadable file. The fourth unit 1005 downloads the downloadable file according to the temporary key verification request saved by the policy library, and if the verification passes, allows downloading the downloadable file.

 The terminal may further include a message for sending a file name carrying the downloadable file and an identifier of the user corresponding to the terminal to the first server, and downloading and downloading according to the network connection information of the terminal that provides the downloadable file returned by the first server. The unit of the file.

 The above terminal may further include any one or any of the following units: a unit for transmitting a message carrying the identifier of the user who is invited to download and the file name of the downloadable file to the first server to invite the unit to download the downloadable file ;

 a unit for transmitting a message carrying a file name, an identifier of a user who issues a downloadable file to a first server to cancel a shared state of the downloadable file;

Sending a message carrying an identifier of a user who publishes the downloadable file to the first server to count all downloadable files with available network connections in the user-published downloadable file that publishes the downloadable file, and receiving the first server The unit of the returned statistical result. In summary, the embodiment of the present invention adopts a login method of the user identifier, and adopts a global access control policy and a method for the local access control policy of the user terminal, that is, the user can select the rights to share files to which users, so that the management server When searching for the download request information, only the shared file information that the user is allowed to download is searched, and the file sharing mode controlled by the user is realized. Although the login server is added, it is not required for the service provider to set up the server itself, and does not increase the hardware or system overhead of the user.

 Moreover, the temporary key is added, and the temporary key is encrypted. The user needs to perform verification during the process of downloading and downloading, which enhances the security of file downloading and publishing. It also increases the time control of the shared files, which can reduce the storage pressure of the management server to a certain extent.

 In the above embodiment, the introduction of the login server improves the security of file publishing and downloading. However, if the user does not log in to the server, if the user knows the network connection information of the management server, the user selects which users to share the file with, so that the management server only searches for the shared file information that the user is allowed to download when searching for the download request information. It is also possible to implement a file sharing method controlled by the user.

 In the case that the sharing and the downloading of the file are safe and controllable, the embodiment of the present invention further provides an invitation mechanism, so that the user can obtain the shared information in time; the function of canceling sharing and counting the shared information further improves the file sharing and download controllable. The method and system have improved user satisfaction.

 The method for publishing and downloading a shared file and the file sharing controllable system provided by the embodiments of the present invention are described in detail. The principles and implementation manners of the present invention are described in the following examples. The description is only for helping to understand the method of the present invention and its core idea; at the same time, for those skilled in the art, according to the idea of the present invention, there will be changes in specific embodiments and application scopes. The contents of this specification are not to be construed as limiting the invention.

Claims

Claim  A method for distributing a file, comprising:  The terminal for providing the downloadable file sends a first message to the first server, where the first message carries the file name of the downloadable file and the identifier of at least one user who is allowed to download;  The first server acquires network connection information of the terminal;  The first server saves the information of the downloadable file, including: a file name, network connection information of the terminal, and an identifier of at least one user who is allowed to download.  2. The method of publishing according to claim 1, wherein  The terminal further carries an identifier of a user who issues a downloadable file in the first message;  After receiving the first message, the first server further saves the identifier of the user who issues the downloadable file; wherein, the identifier of the user who issues the downloadable file corresponds to the information of the at least one downloadable file.  The method according to claim 2, further comprising: the terminal further carrying the identifier of the user invited to download in the first message sent to the first server;  Determining, by the first server, whether the user invited to download is online,  If online, sending, to the user invited to download, a file name carrying a downloadable file, an identifier of a user who issues the downloadable file, and a message of network connection information of the terminal;  If not online, the user who is invited to download is sent a message carrying the file name of the downloadable file, the identifier of the user who posted the downloadable file, and the network connection information of the terminal. 4. The method of distributing according to claim 3, characterized in that The terminal further carries an expiration date of the invitation in a first message sent to the first server;  During the expiration date, when the user invited to download is online, the first server sends the file name of the downloadable file, the user identifier of the terminal, and a network thereof to the user who is invited to download. Connection information.  The method according to claim 2, further comprising: the terminal sending a second message to the first server, where the second message carries an identifier of the user invited to download and a downloadable file File name;  Determining, by the first server, whether the user invited to download is online,  If online, sending, to the user invited to download, a file name carrying a downloadable file, an identifier of a user who issues the downloadable file, and a message of network connection information of the terminal;  If not online, the user who is invited to download is sent a message carrying the file name of the downloadable file, the identifier of the user who posted the downloadable file, and the network connection information of the terminal.  6. The method of publishing according to claim 5, wherein  The second message sent by the terminal to the first server further carries an expiration date of the invitation;  During the expiration date, when the user invited to download is online, the first server sends the file name of the downloadable file, the user identifier of the terminal, and a network thereof to the user who is invited to download. Connection information.  The method according to claim 2, further comprising: when the first server receives the first message, setting a downloadable file corresponding to the file name carried by the first message as Shared state The terminal sends a second message to the first server, where the second message includes: File name, the ID of the user who published the downloadable file;  After receiving the second message, the first server cancels the sharing status of the downloadable file corresponding to the file name and the identifier of the user who issues the downloadable file.  The method according to any one of claims 1 to 7, wherein the acquiring, by the first server, the network connection information of the terminal comprises:  The terminal carries the network connection information of the terminal in the first message sent to the first server.  The method according to any one of claims 1 to 7, wherein the terminal further carries an expiration date of the downloadable file in the first message;  After receiving the first message, the first server does not allow downloading the downloadable file after the downloadable file reaches the expiration date.  The method according to any one of claims 2 to 7, further comprising:  Sending, by the terminal, a statistical request message to the first server, where the statistical request message carries an identifier of a user that issues a downloadable file;  The first server collects all downloadable files with available network connections in the downloadable file that the user who has published the downloadable file, and sends the statistical result to the terminal.  The method according to any one of claims 1 to 7, wherein the sending, by the terminal, the first message to the first server comprises:  Sending, by the terminal, a third message to the second server, where the third message carries an identifier of a user that issues the downloadable file; The second server performs identity verification on the user who issues the downloadable file according to the user identifier; If verified, the terminal sends the first message to the first server. The method according to claim 11, wherein the sending, by the terminal, the first message to the first server comprises:  The second server sends a message carrying the network connection information of the first server to the terminal;  The terminal sends the first message to the first server according to network connection information of the first server.  13. The method of publishing according to claim 12, wherein  If the verification is passed, the second server further sends a message carrying the temporary key to the terminal and the first server respectively;  The terminal further carries the temporary key in the first message sent to the first server;  After confirming that the temporary key is legal, the first server saves network connection information of the terminal, a file name of the downloadable file, and an identifier of a user who can download the downloadable file.  14. The method of publishing according to claim 13, wherein:  The terminal further encrypts the temporary key before carrying the temporary key in the first message;  After receiving the first message carrying the encrypted temporary key, the first server further decrypts the temporary key and confirms whether the temporary key is legal.  The method according to claim 11, wherein the terminal further carries network connection information of the terminal in a third message sent to the second server; the first server acquires network connection information of the terminal Includes: If the verification is successful, the second server sends the carrying to the first server The message of the terminal's network connection information.  A method for downloading a file, wherein the first server stores information of at least one downloadable file, including: a file name, network connection information of the first terminal that provides the downloadable file, and at least one is allowed to download The identity of the user; the method includes:  The first server sends a first message to the second terminal, where the user corresponding to the second terminal is allowed to download the downloadable file, where the first message carries the file name of the downloadable file and the network of the corresponding first terminal. Connection information  The second terminal downloads the downloadable file from the first terminal according to the network connection information of the first terminal.  The downloading method according to claim 16, wherein the sending, by the first server, the first message to the second terminal comprises:  The second terminal sends a second message to the first server to request to download the downloadable file, where the second message carries the file name of the downloadable file and the identifier of the user requesting the download;  Determining, by the first server, information of the downloadable file, determining whether the user requesting to download the downloadable file is allowed to download the downloadable file, and if the download is allowed, the first server is to the first The second terminal sends the first message.  18. The downloading method according to claim 16, wherein:  The first server further saves an identifier of a user who issues a downloadable file; wherein, the identifier of the user who issues the downloadable file corresponds to information of the at least one downloadable file;  The first terminal further sends the identifier of the user who is invited to download to the first server when publishing the downloadable file; The sending, by the first server, the first message to the second terminal includes: The first server sends the first message to the second terminal where the user who is invited to download is located according to the identifier of the user who is invited to download from the first terminal; Downloading the downloadable file from the first terminal by the network connection information of a terminal includes:  The second terminal downloads the downloadable file from the first terminal according to network connection information of the first terminal, or  Ignore the invitation.  The downloading method according to any one of claims 16 to 18, wherein before the first server sends the first message to the second terminal, the method further includes:  Transmitting, by the second terminal, a message carrying the identifier of the user corresponding to the second terminal to the second server;  The second server performs identity verification according to the user identifier;  If verified, the first server sends the first message to the second terminal.  The downloading method according to claim 19, wherein the sending, by the second terminal, the second message to the first server comprises:  The second server sends a message carrying the network connection information of the first server to the second terminal;  The second terminal sends a second message to the first server according to the network connection information of the first server.  21. The downloading method according to claim 19, wherein  If the verification is performed, the first server further carries the temporary key of the first terminal in the first message sent to the second terminal; The second terminal sends a download request carrying the temporary key to the first terminal, and the first terminal transmits the location to the second terminal after confirming that the temporary key is legal The file requested to be downloaded.  22. A system for implementing file sharing, comprising:  And at least one first terminal providing a downloadable file, configured to send a first message to the first server, where the first message carries a file name of the downloadable file and an identifier of at least one user that is allowed to be downloaded;  a first server, configured to acquire network connection information of the first terminal, and save information of the downloadable file according to the first message from the first terminal, including: a file name, and a network connection of the user terminal that provides the downloadable file Information, at least one identifier of the user allowed to download, and sending a second message carrying the file name of the downloadable file and the corresponding network connection information of the first terminal;  At least one second terminal requesting to download the file, configured to receive the second message from the first server, and download the information from the first terminal according to the network connection information of the first terminal that is carried by the received second message download file.  23. The system of claim 22, wherein  The second terminal is further configured to send a third message to the first server to request to download a downloadable file, where the third message carries a file name of the downloadable file and an identifier of the user that requests the download;  The first server is further configured to search for information of the downloadable file corresponding to the file name carried by the third message, and determine whether the user requesting the download is allowed to download the downloadable file, if allowed to download, Sending the second cancellation to the first terminal 24. The system of claim 22, wherein  The first terminal is further configured to carry, in the first message, an identifier of a user that issues a downloadable file; The first server is further configured to save a label of a user who publishes the downloadable file The identification of the user who publishes the downloadable file corresponds to the information of at least one downloadable file.  25. The system of claim 24, wherein  The first terminal is further configured to send, to the first server, a message that carries an identifier of the user that is invited to be downloaded;  The first server is further configured to send, to the second terminal where the user who is invited to download, the file name that carries the downloadable file, the identifier of the user that issues the downloadable file, and the network connection information of the first terminal. a message, invoking the user invited to download to download the downloadable file;  The second terminal is further configured to: when receiving the file name carrying the downloadable file, the identifier of the user who advertises the downloadable file, and the network connection information of the first terminal, according to the invitation The network connection information of the first terminal carried in the downloading the downloadable file from the first terminal.  26. The system of claim 24, wherein  The first terminal is further configured to send a fourth message to the first server, where the fourth message carries a file name and an identifier of a user that issues the downloadable file;  The first server is further configured to: when the first message is received, set the downloadable file corresponding to the file name carried by the first message to be in a shared state, and when receiving the fourth message, The file name and the share status of the downloadable file of the user's identity that posted the downloadable file are canceled.  The system according to any one of claims 22 to 26, wherein the first terminal is further configured to carry network connection information of the first terminal in the first message sent to the first server;  The first server acquires network connection information of the first terminal from the first message. 28. A system according to any one of claims 24 to 26, wherein The first terminal is further configured to send a statistics request message to the first server, where the statistics request message carries an identifier of a user that issues the downloadable file;  The first server is further configured to collect all downloadable files of the user-published downloadable file corresponding to the user identifier carried by the statistical request message, and send the statistical result to the first terminal.  The system according to any one of claims 22 to 26, further comprising a second server, wherein  The first terminal is further configured to send, to the second server, a message carrying an identifier of the user that issues the downloadable file;  And a second server, configured to perform identity verification on the user that issues the downloadable file according to the user identifier, and send the network connection information of the second server to the user terminal if the verification is performed.  30. The system of claim 29, wherein:  The second server is further configured to send a message carrying the temporary key to the first terminal and the first server respectively after the first terminal passes the verification;  The first terminal is further configured to carry the temporary key in the first message sent to the first server;  The first server is further configured to save network connection information of the first terminal, a file name of the downloadable file, and permission to download the downloadable file after verifying that the temporary key sent by the first terminal is legal The identity of the user.  31. The system of claim 29, wherein:  The first terminal is further configured to: carry the network connection information of the first terminal in a message sent to the second server; The second server is further configured to: after the first terminal passes the verification, send, to the first server, a message that carries the network connection information of the first terminal; The first server acquires network connection information of the first terminal from a message from the second server.  32. A file management server, comprising:  a uploading unit, configured to receive a first message sent by a terminal that provides a downloadable file, and obtain network connection information of the terminal, where the first message carries a file name of the downloadable file and an identifier of at least one user that is allowed to be downloaded;  a policy library, configured to store information of the at least one downloadable file received by the uploading unit, including: a file name, network connection information of a terminal that provides the downloadable file, and an identifier of at least one user that is allowed to download;  a downloading unit, configured to receive a second message sent by the terminal that requests the download, where the second message carries the file name of the downloadable file and the identifier of the user requesting the download, and queries the policy library, if the user who requests the download is allowed to download The downloadable file corresponding to the file name sends a message carrying the file name of the downloadable file and the network connection information of the corresponding terminal to the terminal that requests the download.  The management server according to claim 32, wherein the first message received by the uploading unit further carries an identifier of a user who issues a downloadable file;  The policy library is further configured to save an identifier of a user who publishes the downloadable file; wherein, the identifier of the user who issues the downloadable file corresponds to the information of the at least one downloadable file.  The management server according to claim 33, further comprising: An invitation unit, configured to receive a third message carrying an identifier of the user who is invited to download, the third message includes an identifier of the user invited to download and a file name of the downloadable file, and the downloadable in the policy library The file name corresponding to the file name of the file And sending, by the user who is invited to download, a file name carrying the downloadable file, an identifier of the user who issues the downloadable file, and network connection information of the terminal corresponding to the user who issues the downloadable file. Message.  The management server according to claim 33, wherein the policy library is further configured to set a downloadable file corresponding to the file name carried by the first message to a shared state, and cancel the set according to the indication. Shared state  The management server further includes: a sharing cancellation unit, configured to receive a fourth message sent by the terminal, where the fourth message includes a file name, an identifier of a user who issues a downloadable file, and searches the policy library for the corresponding file name and The downloadable file of the identifier of the user who issues the downloadable file, indicating that the policy library cancels the sharing status of the downloadable file.  The management server according to claim 33, further comprising:  The statistic unit is configured to receive a statistical request for carrying the identifier of the user sent by the terminal, check all downloadable files with available network connections, and send the statistical result to the terminal.  A management server according to any one of claims 32 to 36, characterized in that  The uploading unit acquires network connection information of the terminal from the first message from the terminal or acquires network connection information of the terminal from a message from the login server.  The management server according to any one of claims 32 to 36, further comprising: The password set is configured to receive the temporary key sent by the login server and the terminal, and verify whether the temporary key sent by the terminal is legal. If it is legal, the policy library is instructed to save the network connection information of the terminal that publishes the downloadable file, and the file name of the downloadable file. And at least one is allowed to The identifier of the user to be loaded; and sending the temporary password to be sent to the terminal requesting the download 39. A terminal, comprising:  a policy library, configured to save information of at least one downloadable file, including: a file name of the downloadable file, at least one identifier of a user allowed to download the downloadable file, the first unit, configured to send the first server A message, the first message carrying a file name of the downloadable file and an identifier of at least one user allowed to download.  The terminal according to claim 39, further comprising: a second unit, configured to send, to the second server, a message carrying the identifier of the user corresponding to the terminal for identity verification, and receiving the carried back by the second server The message of the network connection information of the first server.  The policy library is further configured to save network connection information of the first server received by the second unit;  The first unit is configured to send the first message to the first server according to the network connection information of the first server saved by the policy library.  The terminal according to claim 40, further comprising: a third unit, configured to receive a message carrying a temporary key returned by the second server. The policy library is further configured to save the temporary key received by the third unit, where the first unit is further configured to further carry the temporary saved by the policy library in the first message sent to the first server The key is used for legality verification.  The terminal according to claim 41, further comprising: a fourth unit, configured to receive a message carrying a temporary key requesting to download a downloadable file, and the temporary key saved according to the policy library The message requesting downloading the downloadable file is verified, and if the verification is passed, the downloadable file is allowed to be downloaded. 43. The terminal according to any one of claims 39 to 42, characterized in that Steps include:  And sending, to the first server, a message carrying a file name of the downloadable file and an identifier of the user corresponding to the terminal, and downloading the downloadable file according to network connection information of the terminal that provides the downloadable file returned by the first server Unit.  The terminal according to any one of claims 39 to 42, characterized in that it further comprises any one or any of the following units:  Means for sending a message carrying the identifier of the user who is invited to download and the file name of the downloadable file to the first server to invite the unit to download the downloadable file;  Means for transmitting a message carrying a file name, an identifier of a user who issues a downloadable file, to the first server to cancel a shared state of the downloadable file;  Sending a message carrying an identifier of a user who publishes the downloadable file to the first server to count all downloadable files with available network connections in the user-published downloadable file that publishes the downloadable file, and receiving the The unit of the statistical result returned by the first server.