Extended file system

[0002] This application claims benefit of Provisional Nos. 60/126,094 filed Mar. 25, 1999 and 60/171,995 filed Dec. 23, 1999.

[0003] The present invention relates generally to computer devices and networks, and more particularly to file storage and access by a computer-related device.

[0004] Consumer devices such as Pocket PCs or palm-sized and handheld computers are limited in their available storage space. These devices are capable of loading and executing software packages in much the same way as a desktop computer, but lack the storage necessary to have several of these packages loaded onto the system concurrently along with other data needed by a user. Other devices such as cable television set-top boxes, satellite receivers and so forth have the same lack-of-memory problems.

[0005] As access to the Internet via such devices is being planned and to some extent implemented, the lack of storage on the devices create problems not seen in home or business computers. For example, personal site customizations, favorites, saved data such as credit card information, cookies and so forth are typically stored on computing devices having relatively large hard disks wherein storage is not normally an issue. E-mail files, which on a device such as a single set-top box, will differ for (possibly multiple) individual users of that device. However, saving such data along with other needed information would quickly fill up the available storage on many devices, and if, for example, a relatively large file was downloaded to the device, the saved data would have to be discarded in order to fit the large file. Indeed, in at least one contemporary cable television set-top box, only 128 kilobytes are available for persisting user data, which is several orders of magnitude smaller than the hundreds of megabytes to dozens of gigabytes typically provided by contemporary personal computers. Contemporary pocket-size devices have somewhat more memory, but are still on the order of tens megabytes or less, of which the operating system and stored programs consume a considerable amount.

[0006] While network shares allow greater amounts of storage to be accessed via remote drive connections, their implementations require constant connection to the network in order to access a network share. Among other drawbacks, this makes network shares unsuitable for use with the Internet. For example, NetBIOS and other drive-sharing (redirector) systems currently require constant communication between the server and the client. Data is not cached, but instead is used directly off the shared file system, and is updated immediately. This is not acceptable for Internet-based file sharing, as the Internet is unreliable, and can be susceptible to long delays in transmission. The NetBios service and SMB protocol are also point-to-point, relatively heavy, and do not scale well to large numbers of remote users and multiple servers. Other existing services are unable and/or impractical to provide a solution to these low memory problems.

[0007] Briefly, the present invention provides a method and system for transparently combining remote and local storage to act as one or more virtual local drives for a computer system client, such as a pocket sized personal computer or a set top box. When a connection to an extended file system server is present, the extended file system provides automatic downloading of information that is not locally cached, and automatically uploading of information that has been modified on the client. Providing such a remote drive allows any client device to load file system objects, storing the directories and files remotely, and retrieving the files only when required. Via its local storage, the extended file system handles unreliable connections and delays, particularly with small files such as cookies, e-mail text and so forth.

[0008] To provide the extended file system, the client includes components that determine via object attributes the remote/local location of file system data, and when appropriate, download or upload the data in a manner that is transparent from the perspective of the application. Thus, an application makes normal file/operating system application programming calls or the like, and the client components determine the source and retrieve/update the data appropriately. Data that is updated (e.g., written) locally is automatically synchronized with the remote server.

[0009] Moreover, communication is fast by use of a relatively lightweight protocol using straightforward primitives described herein, and may be made secure via authentication and encryption. The system scales to large networks as it employs the lightweight protocol and establishes a connection only to retrieve and submit data.

[0010] Other advantages will become apparent from the following detailed description when taken in conjunction with the drawings, in which:

[0011] FIG. 1 is a block diagram representing one exemplary computer system into which the present invention may be incorporated;

[0012] FIG. 2 is a block diagram representing a television set-top box including a computer system into which the present invention may be incorporated;

[0013] FIG. 3 is a block diagram generally representing an extended file system installation in accordance with one aspect of the present invention;

[0014] FIG. 4 is a block diagram generally representing logical components in a client and server for remotely accessing objects in accordance with in accordance with one aspect of the present invention;

[0015] FIG. 5 is a flow diagram generally representing logical steps when enlisting a server to participate in an extended file system in accordance with one aspect of the present invention;

[0016] FIG. 6 is a flow diagram generally representing logical steps when defecting a server from participation in an extended file system in accordance with one aspect of the present invention;

[0017] FIG. 7 is a representation of communications between a client device and a server to initiate access to remote objects and perform file system-related operations thereto in accordance with one aspect of the present invention;

[0018] FIG. 8 is a flow diagram generally representing logical steps when enlisting a client to participate in an extended file system in accordance with one aspect of the present invention;

[0019] FIG. 9 is a flow diagram generally representing logical steps when a client attempts to locate a selected server for accessing an extended file system in accordance with one aspect of the present invention;

[0020] FIGS. 10-12 are representations of how the client components access local objects locally and remote objects remotely in accordance with one aspect of the present invention; and

[0021] FIGS. 13 is a flow diagram generally representing logical steps when determining the source of an object in accordance with one aspect of the present invention.

[0022] FIG. 1 and the following discussion are intended to provide a brief, general description of one suitable computing environment in which the invention may be implemented. Although not required, the invention will be described in the general context of computer-executable instructions, such as program modules, in one alternative being executed by a pocket-sized computing device such as a personal desktop assistant. Generally, program modules include routines, programs, objects, components, data structures and the like that perform particular tasks or implement particular abstract data types.

[0023] Moreover, those skilled in the art will appreciate that the invention may be practiced with other computer system configurations, including hand-held, laptop or desktop personal computers, mobile devices such as pagers and telephones, multi-processor systems, microprocessor-based or programmable consumer electronics including a cable or satellite set-top box (FIG. 2), network PCs, minicomputers, mainframe computers and the like. Part of the invention is also practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote memory storage devices, as described below.

[0024] With reference to FIG. 1, one exemplary system for implementing the invention includes a general purpose computing device in the form of a pocket-sized personal computing device 20 or the like, including a processing unit 21, a system memory 22, and a system bus 23 that couples various system components including the system memory to the processing unit 21. The system bus 23 may be any of several types of bus structures including a memory bus or memory controller, a peripheral bus, and a local bus using any of a variety of bus architectures. The system memory includes read-only memory (ROM) 24 and random access memory (RAM) 25, typically non-volatile RAM (e.g., battery-backed up) in a pocket-sized personal computing device. A basic input/output system 26 (BIOS), containing the basic routines that help to transfer information between elements within the hand-held computer 20, such as during start-up, is stored in the ROM 24.

[0025] A number of program modules are stored in the ROM 24 and/or RAM 25, including an operating system 28 (such as Windows® CE), one or more application programs 29, other program modules 30, program data 31 and a file system manager 32.

[0026] In accordance with one aspect of the present invention, a local memory is used as part of a virtual local drive is provided by an XFS client component 33, which includes an XFS Ramdisk manager and storage 34 (XFSDISK), and other components (described below). A user may enter commands and information into the hand-held computer 20 through input devices such as a touch-sensitive display screen 35 with suitable input detection circuitry 36. Other input devices may include a microphone 37 connected through a suitable audio interface 38 and physical (hardware) or a logical keyboard (not shown). Additional other devices (not shown), such as LED displays or other peripheral devices controlled by the computer, may be included. The output circuitry of the touch-sensitive display 35 is also connected to the system bus 23 via video driving circuitry 39. In addition to the display 35, the device may include other peripheral output devices, such as at least one speaker 40 and printers (not shown).

[0027] Other external input or output devices 42 such as a joystick, game pad, satellite dish, modem or the like (satellite, cable or DSL interface), scanner or the like may be connected to the processing unit 21 through an RS-232 or the like serial port 40 and serial port interface 41 that is coupled to the system bus 23, but may be connected by other interfaces, such as a parallel port, game port or universal serial bus (USB). Such devices may also be internal. The hand-held device 20 may further include or be capable of connecting to a flash card memory (not shown) through an appropriate connection port (e.g., slot) 43 and interface 44. A number of hardware buttons 45 such as switches, buttons (e.g., for switching application) and the like may be further provided to facilitate user operation of the device 20, and are also connected to the system via a suitable interface 46. An infrared port 47 and corresponding interface/driver 48 are provided to facilitate communication with other peripheral devices 49, including other computers, network connection mechanism (e.g., modems or the like), printers, and so on (not shown). It will be appreciated that the various components and connections shown are exemplary and other components and means of establishing communications links may be used.

[0028] Turning to FIG. 2 of the drawings, there is shown an alternate computer system into which the present invention may be incorporated, implemented in a set-top box 54 connected to a television receiver/monitor 56. In FIG. 2, an application 58 which may, for example, provide a user interface configured to control set-up, parental control, tuning, timed operation, and/or the like is provided. The application may also provide a user interface via which a user is able to access the Internet, and may include a browser, although as is known, the browser may be integrated into the operating system 60 of the set-top box 54. A user interacts with the application 58 and/or operating system 60 (such as Windows® CE) via a user input device 62 (such as an attached keypad, infrared remote control and/or hard-wired keyboard) and suitable device interface 64.

[0029] As is known, one of the functions of a contemporary set-top box 54 is to output to the receiver/monitor 56 television programming and Internet content received from a provider 66. To this end, some signal processing mechanism 68 or the like is generally provided, such as including one or more splitters, filters, multiplexers, demultiplexers, mixers, tuners and so forth as required to output appropriate video to the receiver/monitor 56, and to both output and input Internet-related data via a cable/satellite modem 70. Of course, consumer satellite dishes only receive content, and thus in a satellite system an additional mechanism (e.g., telephone line, not shown) is required to output data to the provider 66. Other components 72 such as to display closed-captioning, allow parental control, provide on-screen program guides, control video recorders and so forth may be provided as is also known. In any event, these functions of set-top boxes are known, and are not described herein for purposes of simplicity, except to the extent that they relate to the extended file system of the present invention.

[0030] In accordance with one aspect of the present invention, to provide access to remote client-owned objects (directories and/or files therein) maintained in remote storage 74 by one or more XFS file servers 76, the set-top box includes (e.g., in system memory) an XFS client 33 comprising a number of components (described below) including the XFS Ramdisk manager/virtual local drive 34. A file system manager 32 is also provided, as described below. For example, in the Windows® CE operating system, a suitable file system manager is known as “FSDMGR.”

[0031] An exemplary extended file system (XFS) installation is represented in FIG. 3, and typically comprises a large number (e.g., millions) of client devices 80₁-80_n(for example, the pocket computing device 20 or the set-top box 54). The client devices 80₁-80_nare capable of connecting to one or more of the servers (76₁-76_min FIG. 3) over a network 84 via a service provider 86. The servers 76₁-76_mparticipate in XFS as name servers, access controllers and permission managers, or a combination of access controller, permission manager and name server as described below with reference to FIG. 4.

[0032] The servers 76₁-76_m(more particularly the access controllers) point to a common remote file system for storing files in one or more XFS storage devices 74 implemented using DFS shares. DFS is a feature of Windows® 2000 (or Windows® NT®) that provides file replication (used for providing redundancy of data) and load balancing for a file system. In one preferred implementation, the remote file system is the Windows® NTFS file system, which among other benefits, is considered secure. As will be understood, however, the XFS file system of the client is independent of the remote file system/server configuration, and thus virtually any operating and/or file system (e.g., UNIX, FAT, FAT32) or combination thereof that works with the server-side storage media 74 will suffice for purposes of the present invention.

[0033] In the set-top box implementation, the client devices 54 will normally be physically connected to the servers 76₁-76_mat all times via the cable/satellite modem 70 therein. Indeed, since broadband is in use, remote files may be quickly accessed by the client, as described below, even though logical connections are preferably made on a per-access basis. In keeping with the present invention, however, the client device provides local storage for caching some of the data maintained at the remote storage device 74, thereby enabling operation without a physical connection. Synchronization may be performed at some later time or on demand. As can be appreciated, this is particularly useful with client devices such as pocket-sized computing devices (e.g., 20), digital cameras, and so forth wherein a physical connection is occasional. Moreover, local caching is generally valuable when dealing with Internet content, as even when physically connected to a provider, the Internet is unreliable and can be susceptible to long delays in transmission and also helps in optimizing bandwidth utilization.

[0034] As generally represented in FIG. 4, the extended file system (XFS) comprises the XFS-Client portion 33 and an XFS-Server portion 92, which together generally include the XFS Ramdisk manager/virtual local drive 34 and other components 94-102 (described below). Note that the various components 94-102 are logical components, and it is likely that several of the components may be integrated into and handled by a single program. For example, the XFS server portion 92 may comprise a single physical component servicing the requests for its logical components. For extremely large installations, however, it may be desirable for the components to be implemented separately for scalability reasons. Similarly, the virtual local drive of XFS (managed by the XFSDISK 34) may be at any physical or virtual location or locations in system memory, not necessarily adjoining or within the memory allocated to the other XFS client components.

[0035] The XFSDISK RAMdisk manager 34 that provides the virtual local drive is a complete, thread-safe implementation of a stream interface driver (as defined in the “Windows® CE DDK,” available from Microsoft® Corporation, Redmond, Wash.) The XFSDISK 34 is loaded at boot time, and is configured based on information provided in the system registry. The XFSDISK 34 is capable of loading a file system device on itself, thereby appearing as an actual folder off of the root folder of a hierarchically organized file system. To provide accessible memory, the XFSDISK 34 creates a specified number of heaps of a specified size and then “stitches” them together to give the appearance of a single, contiguous, addressable block of memory which serves as a local cache of the virtual local drive. This address space is shared by the threads and processes which access XFSDISK, either through the associated file system device (e.g., the file system manager 32) or by directly reading from or writing to the disk locations. XFSDISK serves as the local cache for the remote file system of the present invention.

[0036] Two XFS-Client 33 components include the XFS Client Interface (XFSCLNT) 94 and the XFS File System Driver (XFSFSD) 96. The XFS Client Interface 94 is the interface to the XFS Server 92, and is responsible for translating file system requests into XFS primitives (XFS network functions) and marshaling the primitives across to the server. As will be described below, the XFS Client Interface (XFSCLNT) 94 performs initialization operations.

[0037] The XFS File System Driver (XFSFSD) 96 is an installable file system driver, which in one implementation is modeled after the well-documented FAT file system. In keeping with the present invention, a remotely maintained file system is presented as a local file system through XFSFSD 96. As the local disk 33 fills up, the XFSFSD 96 implements a Least Recently Used (LRU) algorithm to make space available. As described below, if it is not possible to make space, the files presented as available in the local file system are marked as remote and for those files, the file system essentially behaves like a redirector. The local cache of files is thus intelligently managed.

[0038] The XFS server portion 92 includes an XFS Access Controller 98, an XFS Permissions manager 100, and an XFS Name Resolution Manager (name services module) 102. The access controller 98 is responsible for receiving primitives from the client and taking actions on them, although when the access controller 98 receives name-server primitives, it routes them to name services module 102. As described below, the access controller 98 translates primitives to appropriate actions to be taken on the file system and sends the response back to the client.

[0039] The Permissions manager 100 is responsible for authenticating clients and users on the clients. Having authenticated the client, and a specified user, the permissions manager 100 provides access to the private folder for a given client. This is done as a part of PRIMITIVE_CALL, described below. The permissions manager 100 may use the standard X509-based authentication scheme for validating clients. In addition to validating client devices, the permissions manager 100 enables multiple users of a common device (e.g., a single set-top box) to share the same device while isolating the files of one user from each other user. SQL-based authentication, the Windows® 2000 Active Directory that specifies domain users or any custom authentication scheme may be used for authentication.

[0040] The name services module 102 provides enlistment and name resolution services, as also described below, by maintaining (e.g., in the local server registry) a local directory of the name servers and access controllers. To enlist, when a server starts up, it sends a UDP broadcast of an enlistment request as described below. If the server gets an appropriate response from one of the other servers, it then sends a directed enlistment for confirming the entries, after which the local directory is synchronized via a directed resolve. The process of sending resolves across to known servers is done at periodic intervals of time to ensure that any server that is added is reflected in the local directory. The name services module 102 also handles defection (withdrawal from participation) of servers. When a defection is initiated for a specific server, the name services module 92 sends directed defects to the other servers in the local directory. Once the other servers have acknowledged the deletion of the defecting server, no more requests are processed.

[0041] For the purpose of XFS communications, there are three specific sets of network functions, called primitives, comprising a set of Name Resolution primitives, which include UDP/TCP packets used to locate XFS components on the network, a set of control primitives, which are UDP/TCP packets used for management of the XFS system, and a set of session primitives, which are TCP streams used to transfer data among XFS components. Session primitives are conducted on TCP connections from machine to machine. TCP provides a minimal Quality of Service (QoS) scenario for the connection. Primitives have two distinct states, request and response. Thus, for example, the response to a Resolve request will be a Resolve response. The Maximum size for a primitive is 512 bytes for UDP transported primitives and 1024 bytes for TCP transported primitives.

[0042] One control primitive is the enlist primitive, which is used to enlist clients (as described below), and also by servers that are attempting to participate in an XFS installation. A field in the primitive identifies whether a client or server sent the Enlist request.

[0043] More particularly, to enlist a server, an XFS server (e.g., 76₃) sends an Enlist primitive to notify the name servers (XFS-NS) that it wants to begin participation in the XFS system. The server 76₃does not begin processing requests until it has received an Enlist response primitive from the name services module at least one other server. After receiving an Enlist response primitive, the XFS server 763 may begin processing requests, however, it should continue to send Enlist primitives until it has received and Enlist response primitive from every name services module 102 server participating on the system. Servers (as well as clients) should maintain lists of resolved server IP's, and preferably update the list in a Time To Live (TTL, which denotes the amount of time that a piece of data may be considered valid before it must be verified), manner. It is recommended that TTL's be no less than 256 seconds for each XFS-NS, and 128 seconds for other servers. In the event that no XFS-NS can be located to resolve requests, the list should be invalidated, and an Enlist primitive should be sent via UDP broadcast to retrieve the network topography.

[0044] After the first Enlist response, the name services module of the server 76₃should send its Enlist requests to unresponsive XFS-NS servers directly, instead of broadcasting the requests on the network. This will help to reduce network traffic and avoid responses from XFS-NS servers which have already responded to the earlier Enlist request.

[0045] For the server control primitive “Enlist,” the logical flow generally described with reference to FIG. 5 should be used to minimize network traffic. As represented in FIG. 5, beginning at step 500, a server sends the enlist request primitive via a UDP Broadcast. This is necessary because the server has no idea as to the locations of XFS-NS's on the network. The server then provides some time duration for responses, as generally represented via steps 502. For each response received, (if any), at step 504 the server records the IP address of the responding server.

[0046] In general, UDP transported primitives expect a UDP response verifying their transmission; if no UPD response is received within a reasonable amount of time, the primitive send is considered to have failed, and should be re-issued some number of times before considering the primitive to have failed completely. Thus, when the time for waiting is over, step 506 tests if no responses were received, and if not, branches back to step 500 to reissue the enlist request primitive via UDP Broadcast. If at least one response was received, step 506 branches to step 508 to determine whether the number of servers that responded is the same as the number of XFS-NS servers reported from the enlist responses (note that the number that responded may be less than or equal than reported, but absent some error will not be greater than the number reported). If the numbers match, the enlistment process ends via step 508. If the number responding is less than the reported number, step 508 branches to step 510 wherein a resolve request for servers of type XFS-NS is sent to one of the at least one known XFS-NS. When the response is received, step 512 sends a UDP directed (i.e., non-broadcast) enlist request to each XFS-NS which did not respond to broadcast request. Step 514 saves the IP addresses for servers that respond to the enlist requests. Note that some wait time (not represented in FIG. 5) to obtain the responses may be provided between steps 510 and 512, and between steps 512 and 514. Note that as long as at least one XFS-NS has responded, the server should begin processing requests, except in the case that the enlisting server is a XFS-NS. The server is to complete enlistment with the other XFS-NS's, and system implementers should strive to ensure that enlistment will be completed even in the case of server and/or network outages.

[0047] To withdraw from participation, an XFS server (e.g., 76₂) sends a Defect primitive to notify the XFS-NS that is no longer wishes to participate in the XFS system. Note that defection is not intended for temporary removal of the server from the XFS system, but rather is used to remove a server from the XFS for extended or indefinite periods. As described below, the name resolution primitive “Locate” will be used to determine server availability. Further, note that the server may quit responding to XFS name resolution and session primitives at this time, but is not to shut down until a Defect response primitive is received from each of the known XFS-NS's in the system.

[0048] For the server control primitive “Defect,” the logical flow generally described in FIG. 6 should be used to minimize network traffic. In FIG. 6, beginning at step 600, a server sends the Defect request primitive via a UDP Broadcast. After some time, (step 602), the server normally receives a number of Defect responses from the XFS-NS servers (step 604).

[0049] At step 606, If the numbers match, the enlistment process ends. Otherwise, (i.e., the number is less than the total number of known XFS-NS servers), step 606 branches to step 608 to send a UDP-directed (non-broadcast) Defect request to each XFS-NS which did not respond to the broadcast request, and then record the IP address of each responding XFS-NFS at step 610. Note that until all known XFS-NS have responded, the server should continue processing requests (step 612), i.e., the server is to complete defection with each XFS-NS. System implementers are to ensure that the defection will be completed, even in the case of server and/or network outages.

[0050] Turning to an explanation of the flow of information between one client 80 and one server 76, FIG. 7 shows (via numerically labeled arrows) how and in which direction communication generally takes place. In FIG. 7, it is assumed that the server with which the client 80 is communicating has already enlisted, as described above.

[0051] As generally represented in FIG. 7 the client sends an enlist request primitive via UDP Broadcast, as represented by the arrow (1), although as can be appreciated, this primitive likely reaches other servers, not shown. This is performed because the client 80 has no idea as to the locations of XFS-NS's on the network. The client receives a number of Enlist responses from XFS-NSes, such as an XFS-NS name service module of the server 76 (arrow (2)). The client 80 records the IP address of each server from which an appropriate response was received. In addition to enlistment, any other custom method can be used to identify the XFS server to the client. In this case, client enlistment process can be bypassed.

[0052] FIG. 8 generally represents the logical flow for client enlistments, (similar in a number of steps to the server enlisted described above with respect to FIG. 5). For the client control primitive “Enlist,” as represented in FIG. 8, beginning at step 800, a client 80 sends the enlist request primitive via a UDP Broadcast. The client 80 then provides some time duration for responses, as generally represented via steps 802. For each response received, (if any), at step 504 the client 80 records the IP address of the responding client 80. When the wait time is up, step 806 tests if no responses were received, and if not, branches back to step 800 to reissue the enlist request primitive via UDP Broadcast, at least for some number of reissue attempts. Alternatively, if at least one response is received, step 806 branches to step 808 to determine whether the number of servers that responded is the same as the number of XFS-NS servers reported from the enlist responses (note that the number that responded may be less than or equal than reported, but absent some error will not be greater than the number reported). If the numbers match, the client has located the full set of servers, and the enlistment process ends via step 808. Note that the XFS-NS will not remember the enlistment of XFS clients. The client enlistment scenario is only for network topography discovery. Thus, the XFS clients have no need to defect from the system, though it is not considered an error for a client to do so.

[0053] If at step 808 the number responding does not equal (i.e., is less than) the reported number, step 808 branches to step 810 wherein a resolve primitive (arrow (3) in FIG. 7) is sent to an XFS-NS (one of the at least one known) to request a list of IP addresses of the specified XFS server type participating on the system.

[0054] Returning to FIG. 7, when the Resolve response is received (arrow (4) in FIG. 7), the client saves the IP addresses for servers from the ResolveResponse data at step 812. The client 80 may select one of the resolved servers (e.g., the server 76) via a random process or the like so that the total load of a set of clients is randomly distributed across multiple servers. A client Locate primitive is then sent by the XFS client 80 to the selected XFS server 76 in order to verify the existence of that server on the network (arrow (5) in FIG. 7), and if it exists, the server responds (arrow (6)).

[0055] More particularly, prior to establishing a TCP session, an XFS client should perform the logical flow represented in the steps of FIG. 9 described below. At step 900 of FIG. 9, the client selects a first XFS access controller, (e.g., from a randomly-ordered list), and at step 902 sends a Locate request to the selected XFS access controller via UDP/TCP. If at step 904 there is no response, (e.g., within a suitable delay), and if at least one other access controller is listed, (step 906), the client selects the next XFS access controller at step 908 and returns to step 902 to repeat the process.

[0056] If at step 904 there are no more XFS access controllers in the XFS client's list of servers, the client sends a Resolve request at step 910 to a known XFS-NS to update the list, and after receiving a response, returns to step 902 for at least some number of retry attempts. In the event that no XFS-NS can be located to respond to the resolve request, (not represented in FIG. 9), the list should be invalidated, and an Enlist primitive should be sent (as described above) via a UDP broadcast to retrieve the network topography.

[0057] Thus, to summarize, at startup time, the XFS Client Interface (XFSCLNT) 94 of a client 80 sends a client enlistment broadcast on UDP to get the network topology of the servers. Once the enlistment response is received, a directed resolve is sent to the server that responded to enlistment to get a list of access controllers and name servers. Once the client receives a list of name servers and access controllers, the initialization is complete and other primitives can be sent. The other primitives are wrapped in PRIMITIVE_CALL and PRIMITIVE_HANGUP, described below.

[0058] The session primitives include a call primitive, which initiates a session with a server that is listening. Authentication will be performed during the call, which may include several round trips on the network. For example, the first client call request primitive may include a device id, user-id, user password and a “ticket” (arrow (7) in FIG. 7). The ticket may not be present if it is the first CALL, for instance after power up. The server retrieves credentials from the CALL primitive. If the ticket is not present, server makes a call into the permissions manager to verify the credentials. If the credentials are not valid, the session is dropped. If the credentials are valid, the server constructs a ticket, which consist of expiration time, box id, user id, and a password, encrypts the ticket and sends it back to the client. In the case when ticket is present in the CALL primitive, the server decrypts the ticket and makes sure that the expiration time is greater then the current time and that the box id, user id and password in the decrypted ticket match the credentials passed. If everything is valid, the same ticket is passed back to the client (e.g., arrow (8) in FIG. 7). Otherwise the credentials are checked against the permissions manager, and if they are valid, a new ticket is generated and passed back to the client. The client caches the ticket and uses it the future when sending CALL primitive. The ticket in the described scheme serves as a scalability component, which greatly reduces hits to the authentication mechanism. In order to further decrease hits, the expiration period is set to random value between predefined minimum and maximum values (typically between 3-8 hours).

[0059] Additionally, the underlying channel is secured using the standard PKI infrastructure. When a client makes a TCP connection to the server, the client sends over “Establish secure channel” message. Then, the client sends over its certificate containing its public signature key. The server validates the certificate as for trust, and if it finds the certificate is not valid, disconnects. The server then sends back over a block of random data. The client computes an MD5 hash of the block of random data, signs the MD5 hash using the client's private signature key, and then sends the signature to the server. The server computes a MD5 hash of a block of the same random data. The server validates the signature passed over by the client using the public signature key buried in the client's certificate. If the validation fails, the client is considered an imposter, and the server disconnects. The server encrypts its two secret RC4 keys with the client's public key exchange key and sends over encrypted RC4 keys—SEND key first and then RECEIVE key. The client decrypts the RC4 keys using its private key exchange key. The client stores the first RC4 key as its RECEIVE key and the second as its SEND key (i.e., opposite of the server). The channel is now secure. Any data to pass through secure connection must be encrypted with the SEND key on the client and then decrypted using the RECEIVE key on the server. The same two keys are shared between all clients connecting to a given server. There is a provision that the server may expire it's RC4 keys at any time, forcing the client to re-negotiate a new set of RC4 keys. This rotation of keys helps the channel from being compromised.

[0060] Once the server authenticates the client and vice-versa, the virtual file system of the present invention is made available to the client. Although not necessary, an automatic directory request (arrow (9) in FIG. 7) is sent on behalf of the client to retrieve the first level of directories (arrow (10)) under the root. One public folder is provided to supply clients with common information, (e.g., an updated component), and each client has a subdirectory at the sever with a unique name. It is this subdirectory that essentially serves as the root for the each client. The client then ends the call via a hangup request (arrow (11)) and response (arrow (12)).

[0061] As shown in FIG. 10, the retrieved directory has whatever subdirectories and files (objects) under it that the user of the client device has stored therefore under the first level. The XFS file system adds an attribute (flag) to each object indicating whether the file or directory data stream is in the local storage, or is remote. As represented in FIGS. 10-12, this is indicated by a circled “R” for remote or “L” for local. As can be understood from FIG. 10, at this time, each directory and file are remote.

[0062] The user can request typical file system operations on objects via session primitives in a new session, (represented in FIG. 7 by arrows numbered (13-18)). As shown in FIG. 7, these XFS-related session primitives (arrows (15) and (16)) are generally wrapped in PRIMITIVE_CALL (arrows (13) and (14)) and PRIMITIVE_HANGUP (arrows (17) and (18)) primitives, and are set forth in the table below:

[0063] As described above, the Call and Hangup primitives are used so that the system can scale to large networks, i.e., XFS establishes a connection only to retrieve and submit data, and then closes (hangs up) the connection.

[0064] Thus, unlike existing file systems, when the user requests a file system operation on an object, the extended file system of the present invention evaluates the Local/Remote attribute to determine whether the object can be retrieved locally or needs to be retrieved from remote storage. Any changes to a local object are synchronized with the remote file system, however reads and the like that do not change an object may be performed locally, without any need to communicate with the server. Note that as described below, some files are too large to be stored locally, and such files are marked by setting another attribute, i.e., a “synchronize only” attribute (circled “S” as represented in FIG. 12).

[0065] By way of example, consider a user presented with the locally-downloaded directory listing 110a when the user (or some entity such as a remote server) wants to access (e.g., open) a particular file, e.g., via the path \DIR₂\DIR₃\File₁₁. When the user selects the DIR₂directory, or when the path\filename is provided, the system determines from the Local/Remote file attribute that the directory \DIR₂is remote. For example, in a Windows® CE environment, an application places an API call to the operating system kernel, which passes the request to the file system manager 32 (FIG. 4). In turn, the file system manager 32 (e.g., FSDMGR in Windows® CE) sends the request to the XFSFSD 96, which analyzes the call and calls back to the file system manager 32 with the information (track and sector) needed to locate the attribute information on the XFSDISK 34. Note that the track equals one on a RAMDisk. When the file system manager returns the attribute information, the XFSFSD 96 determines that the directory data stream is remote, and calls the XFSCLNT 94 to retrieve the data from the remote server. XFSCLNT issues a DIRECTORY primitive to the server and fetches the remote data. As can be readily appreciated, other operating system and/or file systems may perform essentially equivalent operations, and there is no intent to limit the present invention to the Windows® CE operating system.

[0066] When the requested data returns, the XFSCLNT 94 provides it to the XFSFXD 96, which stores it in the XFSDISK 34. At this time, the information is generally arranged as shown in listing 110_bof FIG. 11, i.e., DIR₂is local, and the objects under it remote. The process continues as above to remotely retrieve the DIR₃subdirectory data (listing 110_cof FIG. 12), and then again to remotely retrieve the data of File₁₁. The next time that access to File₁₁is needed, DIR2 and DIR3 may still be local, in which event the data may be locally retrieved from XFSDISK 34, i.e., once data is local, the extended file system essentially behaves in the same manner as any local file system.

[0067] Note that from the perspective of the application and user, there is no knowledge as to where the objects are stored. Indeed, with fast, broadband connections and small files, any delay in retrieval may go unnoticed. Unlike a simple redirector, however, the locally stored information is used whenever the information is present locally.

[0068] Similarly, on the server end, the access controller may perform normal access checks and the like, and if appropriate to return/update the server-maintained data, translates the primitive into whatever command corresponds based on the remote file system in use, (e.g., the access controller an API call that equates to the primitive).

[0069] One of the files in FIG. 12, namely FILE₁₂, is shown as having its synchronize-always (“S”) attribute set. Note that the other files (and also directories) have this attribute, but it is only shown in FIGS. 10-12 for the file (FILE₁₂) where it is active. This attribute is used for files that are too large for local memory; their information is always retrieved from the remote storage, providing the user with as much data as possible at a given time given available memory, but without maintaining the file in the local XFSDISK 34. In other words, the extended file system operates as a redirector for such objects. Some threshold size (e.g., less than the available RAMDisk size) may be used to determine when a file is synchronize-always. Note that it is also feasible to cache partial files in the XFSDISK 34, and provide the application with an appropriate window to the data, however this is not presently implemented. For example, one present implementation uses a file object as the unit of remote or local storage, however it is equivalent to use something smaller or larger than a single object, e.g., resolution may be to a sector, part of a stream (useful for streaming audio or video) and so forth. As used herein, “object data” such as local or remote object data, includes any size, fixed or variable into which the data may be divided or combined.

[0070] Similarly, objects may have a “local-always” attribute set therefor, i.e., if an object is not too large, (e.g., over a certain threshold which may be up to the entire size of the local RAMDisk), the object may be marked so as to not remove it from the cache via the least-recently-used algorithm or otherwise. The local-always “LA” attribute is present for each file, but is only shown in FIGS. 11 and 12 for one file, file \DIR₂\File_k. This may be valuable, for example, to save a particular directory stream, or to save file data that is often needed and should not be removed, e.g., if a user reads some large file. Note that if a file is marked as local always, its parent directory or directories may be marked local-always so that it can be accessed even when no connection is present.

[0071] To summarize, FIG. 13 shows the general logic performed by the extended file system when retrieving (e.g., reading) or updating (e.g., writing) data, beginning at step 1300. At step 1300, the local-always attribute corresponding to the requested object is evaluated. If set to local-always, then the object will be cached locally, and thus step 1300 branches to step 1308 to retrieve (or update) the data from (or to) the local RAMDisk as described above.

[0072] If not local-always at step 1300, the synchronize-always attribute corresponding to the requested object is evaluated at step 1302. If set to synchronize-always, then the object will not be cached locally, and thus step 1302 branches to step 1304 to retrieve (or update) the data from (or to) the remote source using appropriate primitives as described above.

[0073] If instead at step 1302 the synchronize-always attribute is not set for synchronize-always, the extended file system evaluates the Local/Remote attribute at step 1306 to see if the information to be retrieved or updated is local. If local, step 1308 is performed to retrieve or update the local data. Steps 1310 and 1312 handle the synchronization of the remote data for updates (e.g., writes) to the local data. Note that it is possible that an update to the local data may result in the file becoming too big for local storage by the XFSDISK. In such an event, the object is set to synchronize-always, and is no longer supported locally unless its data later shrinks. Thus, as used herein, “always synchronize, synchronize-always, always local, local-always and the like” are not necessarily attributes that are permanent, and instead, can vary as appropriate based on the file size, available storage, and/or other factors.

[0074] Returning to step 1306, if the Local/Remote attribute indicates that the data is remote, the process instead branches to step 1314 to handle the operation remotely, i.e., to retrieve or update the object data from or to the remote store. Step 1316 then stores the data locally, unless it is too large for the local storage, in which event the synchronize-always bit is set (if not already set) and the data handled remotely thereafter unless and until it shrinks.

[0075] The information below is a description of the packet formats used in the transmission protocols, and their corresponding C/C++ structures. Each packet comprises a primitive header followed by the data of the primitive. Format of the data section depends on the type of primitive. The maximum size for a single primitive (header and data) is 512 bytes.

[0076] A plurality of data types are used in the transmission of data, including those set forth below:

[0077] For graphical representation of structures, the following format will be used, where n is the size of the field in bits:

[0078] The primitive header structure is set forth below:

[0079] Valid values for the primitive header fields are

[0080] The primitive header is followed by 0 or more data structures. The type of structure following the header is determined by the wPrimitive and wrequest fields

[0081] Structures for the data fields are listed according to Type=ttt, Request=r where ttt is one of the defined PRIMITIVE_values, and r is 1 for a request primitive and 0 for a response primitive.

[0082] Type=PRIMITIVE_RESOLVE, Request=1

[0083] where rgcName is one of the following values:

[0084] XFS_C=1

[0085] XFS_AC=2

[0086] XFS_NS=3

[0087] XFS_DS=4

[0088] XFS_PM=5.

[0089] Values 6-255 are reserved at this time and should not be used.

[0090] The szNUID field is the name of the XFS system to resolve against. XFS-NS's are only to respond to resolve requests if they are members of that particular XFS system. XFS names are decided upon by the network administrator, and should be unique across the network. For Internet use, it is recommended that the ASCII representation of a static, unique IP address be used. This will prevent multiple XFS vendors from selecting conflicting names.

[0091] Type=PRIMITIVE_RESOLVE, Request=0

[0092] The values cIP₁through cIP₄are the numbers in the IP address for the requested servers in cIP₁.cIP₂.cIP₃.cIP₄format. The number of IP addresses is determined by |{IP}|=(wSize)/sizeof(ResolveResponse).

[0093] If the final IP address is IP_BROADCAST (255.255.255.255) and the wMore flag is 0, then there are more IP's available, and the requester should send a Continue primitive to retrieve the next block IP addresses.

[0094] If the wMore flag is 1, the final address will not be IP_BROADCAST, and the requester should expect another Resolve response primitive.

[0095] cType is the same as send with PRIMITIVE_RESOLVE, Request=1. This is returned for convenience.

[0096] Type=PRIMITIVE_LOCATE, Request=1

[0097] No data is associated with the Locate request primitive. It is simply a “ping” to make sure that the requested machine is still available.

[0098] Type=PRIMITIVE_LOCATE, Request=0

[0099] No data is associated with the Locate response primitive. The fact that a reply is generated is sufficient to imply that the located machine is processing requests.

[0100] Type=PRIMITIVE_CALL, Request=1

[0101] The data associated with the Call primitive is implementation specific. It should contain information about the client (such as name/password) or some information used to begin arbitration of credentials.

[0102] typedef unsigned char[ ] CallRequest;

[0103] While wSize could be 0 (no data), this is highly discouraged for open systems, as no security model will be implement-able and no user information or state will be known.

[0104] Type=PRIMITIVE_CALL, Request=0

[0105] The data associated with the Call primitive is implementation specific. It should contain information about the client (such as name/password) or some information used to begin arbitration of credentials.

[0106] typedef unsigned char[ ] CallResponse;

[0107] Type=PRIMITIVE_CONTINUE, Request=1

[0108] The data associated with the Continue request primitive is dependent on the last non-continue request primitive issued for this connection. e.g. The data type for a Continue request primitive in response to a Continue Send response primitive returned from a Send request primitive is the same as for a Send request primitive.

[0109] Type=PRIMITIVE_CONTINUE, Request=0

[0110] A Continue response primitive is send in response to an X primitive request. For example, if a Call request primitive is issued, and a continuation is required, the Call is answered with a Continue response primitive. The caller would then provide additional data according to the needs of the session, and return a Continue request primitive.

[0111] The data associated with the Continue response primitive is a set of data according to the last non-continue primitive request issued on this connection. If there were no prior non-continue requests on the connection, the Hangup primitive (with error) should be returned and the session terminated.

[0112] Type=PRIMITIVE_HANGUP, Request=1

[0113] The Hangup request primitive requests termination of the current session. The receiver should note the dwErrorCode field, return the Hangup response primitive, and gracefully terminate the session.

[0114] If dwErrorCode is not 0 (ERROR_SUCCESS) then dwErrorCode is an implementation specific error about the reason for termination. Win32 error codes should be used by implementations for interoperability.

[0115] The string strError is a nul terminated human readable description of the error. While it is not required (strError[ ]==0), an application should attempt to provide an error string whenever possible.

[0116] Multiple error codes are allowed, the receiver of a Hangup request primitive should continue parsing HangupRequest data structures until wSize bytes have been consumed.

[0117] Type=PRIMITIVE_HANGUP, Request=0

[0118] The Hangup response primitive verifies receipt of request for termination of the current session. The receiver should note the dwErrorCode field. If the field is not 0 (ERROR_SUCCESS) the receiver should terminate the session immediately (non-graceful shutdown) because and error was encountered while closing the session.

[0119] The string strError is a nul terminated human readable description of the error. While it is not required (strError[ ]==0), an application should attempt to provide an error string whenever possible. Only one Hangup response data field is allowed.

[0120] Type=PRIMITIVE_SEND, Request=1

[0121] The Send primitive sends part of all of an object to a XFS service. The system is designed so that portions of the object may be updated without transmission of the entire object. It is not necessary that a XFS service send partial objects, but all XFS systems must be able to receive them.

[0122] typedef DWORD CRC;

[0123] A send request contains the length and the start of section identifier. dwFileID is the file identifier returned by PRIMITIVE_CREATEFILE. A CRC is calculated and send across with the primitive. This ensures correct receipt of data. The receiver of this primitive must validate the CRC and only then commit object to the persistent store. If the CRC does not match, the response will contain appropriate error code and the sender should re-send the primitive.

[0124] CRC is calculated by the formula $\mathrm{CRC}=\left[\sum _{i=0}\left(x_i^{23}+x_i^{26}+x_i^9+x_i^5+x_i^3+x_i\right)\right]\mathrm{MOD}{2}^{32}$

[0125] A send request primitive containing dwLength=0, dwSectionStart=0 denotes the end of the request. In a chained send, this will inform the receiver that the send is complete and it should reply with a Send response primitive. In a send/continue scenario, this informs the receiver that no more sections are required to be sent, and the transaction should be terminated with the send response primitive.

[0126] Type=PRIMITIVE_SEND, Request=0

[0127] The Send response primitive returns an error code that specifies the result of the operation. A value of 0 (ERROR_SUCCESS) indicates a successful completion of the operation. ERROR_CRC indicates that the CRC did not verify successfully.

[0128] Type=PRIMITIVE_RETRIEVE, Request=1

[0129] The Retrieve request primitive is used to start the process of retrieving an object. It specifies the name of the object as well as the portion(s) it wishes to retrieve.

[0130] The dwFileID field contains the file identifier returned by PRIMITIVE_CREATEFILE. The RetrieveOffset array contains the sections, their starting positions, and their lengths to be retrieved. Certain combinations of values for dwOffset and dwLength mean have special meanings.

[0131] A section start of 0 and Length of 0 indicates end of retrieval by the client. Note that at present, this primitive implements only one retrieve section per request.

[0132] Type=PRIMITIVE_RETRIEVE, Request=0

[0133] The Retrieve response primitive returns the CRC and (if requested) the data from a section of the object, or the CRC of the entire object if so requested.

[0134] The dwError field indicates if the retrieve operation was successful. A return value of 0 (ERROR_SUCCESS) means that the operation completed successfully.

[0135] The value of the field crc is one of two values. If the dwLength==0, the crc field should be ignored since no data was sent back with the response. Otherwise, the crc field contains the CRC of the rgcData field.

[0136] Once the client gets retrieve response, it should verify the crc. If it does not mach, it should re-send the primitive across.

[0137] A Retrieve sequence is terminated by the server with either retrieve response, a return value other than 0 in dwError or length less than the requested length. If the length is less than requested length, a retrieve response is send back. Otherwise, a continue is send back from the server. The client can terminate the retrieve sequence by sending a sectionstart=0 and dwlength=0 with the retrieve request.

[0138] Type=PRIMITIVE_DIRECTORY, Request=1

[0139] The Directory request primitive requests a list of some or all objects and sub folders from 1) the current working directory of the session, 2) a directory relative to the current working directory, or 3) a specific directory.

[0140] The szDirectory field is a null-terminated string in one of the following formation:

[0141] The cTypeMask field contains a bitmask describing the types of objects to list. The value of the cTypeMask field is a bitwise OR of one or more of the following values

[0142] ATTR_READONLY=0x01

[0143] ATTR_DIRECTORY=0x02

[0144] ATTR_ALLOBJECTS=0xFF

[0145] The szNameMask field is a string that is used to filter the list of objects returned by name. The szNameMask field may be empty, in which case, all located objects matching the cTypeMask parameter are to be enumerated.

[0146] The szNameMask field may contain the “wildcard” characters ‘?’ and ‘*’, where

[0147] ?=Any character in this location is a match.

[0148] *=Any set of characters starting at this location is a match.

[0149] cFiller is padding for 16 byte alignment required by many processors.

[0150] This is analogous to the DIR command under DOS.

[0151] Type=PRIMITIVE_DIRECTORY, Request=0

[0152] The Directory response primitive contains the names and flags of objects located by the Directory request primitives masks.

[0153] The cFlags field of the DirectoryResponse structure contains a bitwise OR of the attributes of the named object. Currently, only the flags ATTR_READONLY and ATTR_DIRECTORY are defined—see “Type=PRIMITIVE_DIRECTORY, Request=1” for values of these flags.

[0154] cFiller is padding for 16 byte alignment required by many processors.

[0155] The szName field is a nul terminated string giving the canonical name of the object, sans directory information.

[0156] Type=PRIMITIVE_CHANGEDIR, Request=1

[0157] The ChangeDir request primitive requests the changing of the current working directory for the session.

[0158] szDirectory is a nul-terminated string in one of the following formation:

[0159] . the current working directory

[0160] .. the parent of the current working directory

[0161] [.|..]\<name> directory relative to the current working directory. <name> is the name of the relative directory and may include “\” for multiple levels of indirection.

[0162] \<name> directory relative to the root “\” directory, that is, a specific directory.

[0163] This is the only primitive for which an error does not generate a Hangup request in response. A ChangeDir request primitive will be answered with a ChangeDir response primitive with szDirectory !=szNewDirectory (see “Type=PRIMITIVE_CHANGEDIR, Request=0” below for details on the ChangeDir response primitive).

[0164] Type=PRIMITIVE_CHANGEDIR, Request=0

[0165] On Success

[0166] On Error

[0167] szNewDirectory is a nul-terminated string in one of the following formation:

[0168] . the current working directory

[0169] .. the parent of the current working directory

[0170] [.|..]\<name> directory relative to the current working directory. <name> is the name of the relative directory and may include “\” for multiple levels of indirection

[0171] \<name> directory relative to the root “\” directory, that is, a specific directory.

[0172] If no error occurs, szNewDirectory should be equal to the szDirectory parameter from the Changedir request primitive, and only a ChangedirResponse is returned in the data portion.

[0173] If an error occurs, szNewDirectory should be the new current working directory (even if the new CWD is the same as the original CWD) and the data segment will contain a ChangedirResponse structure followed by a ChangedirError structure.

[0174] Type=PRIMITIVE_ENLIST, Request=1

[0175] The Enlist request primitive is used to register new XFS servers with the XFS-NS's. The enlistment/defect scenarios are meant for permanent addition and removal of servers. Limited removal from the system is accomplished though the fact that XFS servers will not respond to a Locate request primitive when inactive or disabled.

[0176] The cType location contains the type of XFS server being registered. It can be one of the following values:

[0177] XFS_C=1*

[0178] XFS_AC=2

[0179] XFS_DS=3

[0180] XFS_NS=4

[0181] XFS_PM=5

[0182] Values 6-255 are reserved at this time and should not be used.

[0183] The enlistment of a XFS-C is not maintained in the XFS-NS. It is supplied so that clients may locate the XFS-NS's without prior knowledge of the network topography. As such, there is no need to defect a XFS-C from the network.

[0184] The cIP fields contain the IP address of the enlisting box in cIP1.cIP2.cIP3.cIP4 format.

[0185] The szNUID field is the name of the XFS system to enlist with. XFS-NS's must only respond to enlist requests if they are members of that particular XFS system. XFS names are decided upon by the network administrator, and should be unique across the network. For Internet use, it is recommended that the ascii representation of a static, unique IP address be used. This will prevent multiple XFS vendors from selecting conflicting names.

[0186] Multiple Enlist Request structures may be present. This allows a multi-homed box to register several IP addresses, or a package implementing multiple XFS services to register all services at the same time.

[0187] If more enlistment's are required than the data segment of the datagram will support, the enlisting service(s) must send separate Enlist requests for each block of IP's. Neither datagram chaining nor the continue scenario is supported for enlistment.

[0188] Type=PRIMITIVE_ENLIST, Request=0

[0189] The Enlist response primitive is sent from a XFS-NS to notify an enlisting server that the enlistment into the XFS system has succeeded.

[0190] The nNSCount field contains the number of XFS-NS's currently known to the system so that the enlisting box will know when all XFS-NS's have succeeded in registering the enlistment.

[0191] Type=PRIMITIVE_DEFECT, Request=1

[0192] The Defect request primitive is sent to remove the requester from the XFS-NS's namespace. The requestor must issue a Defect request for every Enlist request that was previously registered.

[0193] The Defect request primitive data is substantially identical to the EnlistRequest primitive data. See the above information in “Type=PRIMITIVE_ENLIST, Request=1” for details on data values and semantics.

[0194] Type=PRIMITIVE_DEFECT, Request=0

[0195] The Defect request primitive notifies the defecting server that the defect has been registered on a XFS-NS.

[0196] There is no data associated with the Defect request primitive.

[0197] Type=PRIMITIVE_CREATEDIR, Request=1

[0198] The CreateDir primitive requests the creation of a new directory. The directory could be a new directory in the current directory for the session, new directory relative to the current directory for the session or a specific directory.

[0199] Type=PRIMITIVE_CREATEDIR, Request=0

[0200] CreateDir response indicates the result of the operation.

[0201] A return value of 0 (ERROR_SUCCESS) indicates the operation completed sucessfully.

[0202] Type=PRIMITIVE_CREATEFILE, Request=1

[0203] The CreateFile primitive requests creation of a new file or open an existing file.

[0204] szFileName can be file in the current directory for the session, relative directory to the current directory for the session or a specific directory in object store.

[0205] dwDesiredAccess specifies the type of access to the file. This is an implementation specific parameter that goes across with the primitive. Typical types of access would be read, write or both.

[0206] dwShareMode specifies how the file can be shared. Setting this field to 0 implies the file cannot be shared. Other sharing modes are implementation specific parameter. Typical types of sharing modes would be share for read and share for write.

[0207] dwCreateDisposition the actions that can be taken on files that exist and files that do not exist. Following actions may be supported Create New, Create Always, Open Existing, Open Always and Truncate Existing. The implementation of these actions is left to the developer.

[0208] dwFileAttributes specifies the attributes for the file. This is an implementation specific parameter.

[0209] Type=PRIMITIVE_CREATEFILE, Request=0

[0210] CreateFile response indicates the result of operation.

[0211] dwFileID is the ID of the newly created or opened file. This is set to 0xFFFFFFFF (INVALID_HANDLE_VALUE) if the operation is unsuccessful.

[0212] dwError is set to 0 (ERROR_SUCCESS) if the primitive succeeds. A non-zero value indicates an error in operation.

[0213] Type=PRIMITIVE_REMOVEDIR, Request=1

[0214] The RemoveDir primitive requests deletion of an existing empty directory. The directory to be removed can be relative to the current directory for the session or a directory in the current directory in the session or a specific directory.

[0215] szDirectoryName is the name of the directory to be removed.

[0216] Type=PRIMITIVE_REMOVEDIR, Request=0

[0217] RemoveDir response indicates the result of RemoveDir operation.

[0218] dwError is set to 0 (ERROR_SUCCESS) if the operation succeeds.

[0219] Type=PRIMITIVE_DELFILE, Request=1

[0220] DelFile primitive requests deletion of an existing file. The file to be deleted can be in the current directory for the session, directory relative to the current directory for the session or a specific directory.

[0221] szFileName is the name of the file to be deleted.

[0222] Type=PRIMITIVE_DELFILE, Request=0

[0223] DelFile response indicates the result of DelFile operation.

[0224] Type=PRIMITIVE_CLOSEFILE, Request=1

[0225] CloseFile closes the file either created or opened by CreateFile primitive.

[0226] dwFileID is the file identifier returned by CreateFile primitive.

[0227] Type=PRIMITIVE_CLOSEFILE, Request=0

[0228] CloseFile response identifies the result of CloseFile operation. If the file could not be closed, it must be closed once the session terminates.

[0229] dwError is set to 0 (ERROR_SUCCESS) if the operation succeeds.

[0230] Type=PRIMITIVE_MOVEFILE, Request=1

[0231] MoveFile primitive renames an existing file or a directory.

[0232] szExistingFileName is a null terminated string that names an existing file or directory.

[0233] szNewFileName is a null terminated string that specifies a new name for the file or directory.

[0234] Type=PRIMITIVE_MOVEFILE, Request=0

[0235] MoveFile response indicates the result of MoveFile operation.

[0236] dwError is set to 0 (ERROR_SUCCESS) if the operation succeeds.

[0237] Type=PRIMITIVE_GETFILEATTR, Request=1

[0238] GetFileAttr requests the attributes for a specified file or a directory.

[0239] szFileName is a null terminated string that specifies the name of the file or directory.

[0240] Type=PRIMITIVE_GETFILEATTR, Request=0

[0241] GetFileAttr response contains the attributes of the requested file or directory and a error code.

[0242] dwAttr is a 32 bit value specifying the attributes for the file. This value is meaningful if dwError is set to 0 (ERROR_SUCCESS). The actual values of the attributes are implementation specific and are the same as implemented in CreateFile primitive.

[0243] dwError is set to 0 is the operation succeeded.

[0244] Type=PRIMITIVE_SETFILEATTR, Request=1

[0245] SetFileAttr requests setting of the file attributes.

[0246] szFileName is a null terminated string that specifies the name of the file whose attributes are to be set.

[0247] dwAttr is a 32 bit value specifying the attributes for the file. The actual values of the attributes are implementation specific and are the same as implemented in CreateFile primitive.

[0248] Type=PRIMITIVE_SETFILEATTR, Request=0

[0249] SetFileAttr response indicates the result of SetFileAttr a operation.

[0250] dwError is set to 0 (ERROR_SUCCESS) if the operation succeeds.

[0251] Type=PRIMITIVE_GETFILESIZE, Request=1

[0252] GetFileSize requests the file size for a given file id. The file should be opened using CreateFile primitive prior to invoking this primitive.

[0253] dwFileID is set to the file id returned by CreateFile Primitive.

[0254] Type=PRIMITIVE_GETFILESIZE, Request=0

[0255] GetFileSize response indicates the result of GetFileSize operation.

[0256] dwFileSize contains the file size if the primitive is successful. In case of failure, this is set to 0xFFFFFFFF. dwRetCode specifies if the operation is successful. This field is set to ERROR_SUCCESS if successful. Otherwise, an implementation specific error code must be returned in this field.

[0257] Type=PRIMITIVE_SETEOF, Request=1

[0258] SetEOF primitive set's the EOF at the current position in the file.

[0259] dwFileID is set to file id returned by CreateFile primitive.

[0260] Type=PRIMITIVE_SETEOF, Request=0

[0261] SetEOF response indicates the result of SetEOF operation.

[0262] dwRetCode is set to ERROR_SUCCESS if the operation completes successfully. In case of error, an implementation specific error is set in this field.

[0263] Type=XfsTICKET

[0264] The following structure defines the ticket send across by the server in the PRIMITIVE_CALL Response after authentication.

[0265] The XFS system specifies two types of transport for primitives, UDP and TCP. UDP and TCP communications are conducted on separate IP ports. It is recommended that port 171 be used for UDP communications and port 172 used for TCP communications. However, any available port could be configured for TCP and UDP communications.

[0266] Session primitives are restricted to TCP transport. Control primitives—which are UDP capable—are capable of being used with UDP broadcast. Primitives are listed in the table below with the types of transports that may be used with them. Available transports are denoted by an ‘x’ in the transport column. The preferred transport(s) for the primitive is denoted by a capital ‘X’.

[0267] As can be seen from the foregoing detailed description, there is provided a method and system wherein a client device has access to an entire file system with large storage capacity when a physical connection is present, even with limited memory resources. The system and method are fast, efficient, scalable and secure. The client device works with locally-cached data, and thus may work without a physical connection, and then upload any changes at a later time. While the present invention thus provides particular benefit with the Internet, it also provides numerous other benefits to computer users in general. Note further that the present invention need not be limited to hierarchically arranged directories of files, but may alternatively be used with other arrangements of data.

[0268] While the invention is susceptible to various modifications and alternative constructions, certain illustrated embodiments thereof are shown in the drawings and have been described above in detail. It should be understood, however, that there is no intention to limit the invention to the specific form or forms disclosed, but on the contrary, the intention is to cover all modifications, alternative constructions, and equivalents falling within the spirit and scope of the invention.