Link-s Enterprise Solution Specification

Link-s Enterprise P2P Encrypted File Transfer & Precise Sharing Solution

Download PDF

Empower Secure & Efficient Data Flow, Rebuild Enterprise File Sharing & Transfer Security Boundaries

Link-s is an all-new enterprise-grade file sharing and transfer solution designed to solve three core challenges in cross-regional large-file transfer: transfer efficiency, data security, and industry compliance. The solution fully supports private deployment, is deeply compatible with domestic operating systems such as UOS and Kylin, and provides secure and controllable file transfer and sharing services for government, finance, military, manufacturing, and other industries with core advantages including stability, high-speed transmission, full encryption, and precise sharing control.

1. Cross-Regional Large File Transfer & Sharing: Dual Pain Points of Efficiency & Security

For files of dozens or even hundreds of GB—such as database backups, code repositories, design source files, confidential business data, and system logs—transfer and cross-department sharing using traditional methods exposes critical weaknesses:

Link-s Enterprise Solution is a security solution built specifically to address these dual pain points of transfer + sharing.

2. Core Technical Advantages: P2P Encryption + Resuming + Private Deployment + Precise Sharing

1. P2P Encrypted Transfer, Data Never Lands

Link-s uses a P2P invitation mechanism to establish temporary encrypted tunnels. Files travel directly from sender to receiver without passing through any intermediate servers. Transmission uses a hybrid encryption system: Kyber-768 Post-Quantum + AES-256/SM4-CTR. Keys are generated and stored only at endpoints; servers cannot obtain keys or decrypt content. Both transfer and sharing with designated members guarantee end-to-end security.

2. Breakpoint Resuming + Auto Reconnection for Complex Networks

Built-in breakpoint resuming and auto-reconnection on disconnection. Transfers continue from the interrupted position without restarting. Large file sharing in teams no longer fails repeatedly due to network fluctuations.

3. Full-Stack Private Deployment to Protect Data Sovereignty

For organizations with strict data sovereignty requirements, full private deployment is available: Signaling Service, Relay Service, Audit Platform, and Sharing Policy Engine can all be deployed on the enterprise intranet, ensuring data never leaves the domain and easily meets compliance requirements.

4. Precise Sharing: Fine-Grained Control by File & Contact

Abandoning inefficient "public link" or "all-visible" sharing models, Link-s provides dual sharing control at contact and file levels:

3. Layered Technical Architecture: Stable, Reliable, Easy to Operate

Link-s uses a standardized layered architecture with five core components balancing performance, security, and sharing management:

LayerCore ComponentCore Responsibility
Access LayerMulti-Platform ClientSupports Windows/Mac/Linux & domestic OS, portable no-install
Control LayerSignaling Service ClusterConnection negotiation, user auth, transfer session management
Forward LayerRelay Service ClusterCross-network data forwarding, horizontal scaling supported
Security LayerIP Management + Sharing Policy EngineIllegal device blocking, contact authorization verification
Management LayerAudit Web ConsoleGlobal log audit, account permissions, file flow & sharing behavior traceability

4. Highly Scalable Architecture: Clustered Deployment, No Single Point of Failure

1. Decentralized Signaling Cluster

Signaling service uses a decentralized distributed cluster. Any node can access global services; session status and user info sync automatically. Single points of failure are eliminated; automatic failover ensures uninterrupted service, with unlimited horizontal scaling.

2. Relay Service Cluster

Relay service supports clustered deployment with unlimited nodes, elastic scaling with business volume. Optimal relay nodes are assigned intelligently during cross-network transfer to ensure availability and stability.

3.Global Audit + Sharing Behavior Traceability

Audit platform enables full-dimensional control: account lifecycle management, force logout, file sharing permission control, black/white list policies, full sharing access logs (who, when, downloaded), meeting enterprise fine-grained operation and compliance needs.

5. Powerful Transfer + Flexible Sharing Mechanism

Four Intelligent Connection Modes for All Scenarios

Fully covers intranet collaboration, server-client transfer, cross-regional remote collaboration, and more — balancing sharing experience and transfer speed.

6. Deep Private Deployment for High-Compliance Sharing

Enterprises can deploy the full suite on the intranet independently:

Truly achieves data in-domain, permissions controllable, sharing auditable, access blockable, perfectly adapting to extreme data security and compliance requirements.

7. Solution Summary: Encrypted Transfer + Precise Sharing, Rebuild Enterprise File Collaboration

Link-s Enterprise P2P Encrypted File Transfer System features no speed limits, no file size limits, full-link encryption, private deployment, and precise sharing authorization as core advantages. It uses AES/SM4-CTR + ML-KEM end-to-end encryption to ensure full encryption for transfer and sharing, with keys only stored at endpoints and servers unable to decrypt.

It supports four connection modes: LAN Direct (L-DC), WAN Direct (W-DC), P2P Hole Punching (DH-DC), and Relay Forwarding (Relay). It innovatively introduces enterprise-grade sharing controls including contact-level visibility and access audit tracking, achieving the optimal balance between security, stability, speed, compliance, and usability — the ideal choice for secure cross-regional large file transfer and fine-grained sharing.

``` ```