Access Right Control Of P2P File Distribution System

The Internet is a place where communication take place in a high level (worldwide), users interchange information, but the flow of information from one side to another one must follows some rules and regulations called protocol. In our thesis we will explore the distributions file system and the protocol is BitTorrent. This last five years, Peer-to-Peer (P2P) technologies have become very popular. The P2P system is a distributed network architecture, where members share their own resources, such as processing power, storage capacity, or network bandwidth. The service or content provided by the P2P network is accessible by other peers directly, without passing intermediary entities (such as servers or stable hosts). Many organizations use BitTorrent to distribute their software in order to reduce client download time and reduce the load on their servers. In the process of files sharing there are many illegitimate contents one can download via BitTorrent, and the protocol does not provide the protection against downloading content with copyright or individual properties. This lack of content protection is a big issue, and has been a subject of research area. Therefore our main objective is to implement a system using BitTorrent protocol that will discriminate some users who are not members.Our system has been developed to alleviate difficulties in sharing torrent file within members, it will provide some securities such as user identification, authentication, authorization and torrent file encryption. The identification and authentication is used to check the user that is login to our system, in order to ban unwanted users. Here the user must register and wait for the administrator to approve, after acceptance the user enters the system using his username and password. Realizing that the given security level is not enough came the idea of authorization. In the authorization the system will provide a control to determining whether an authenticated client is allowed to access some torrent files and perform the task within a security domain. Authorization uses information about a client's identity (access level) to determine the torrent file that is granted to the current user. Authorization locks out some unwanted users but once the torrent file is in the hand of the user the protection is vanish, so for that reason we introduce the encryption aspect. Encrypting our torrent file will provide more security for the content protection.The encryption process is done using symmetric algorithm, since Symmetric cryptography uses a single private key to both encrypt and decrypt torrent. Any user that has the key can use it to encrypt and decrypt torrent, yet the protection is not complete. To provide a complete solution to that security issue we have to use the asymmetric encryption to protect the symmetric key. Another user can not have access without the private key.The aim of this Thesis is to indicate how to protect data that are transfer using peer-to-peer file sharing system using BitTorrent protocol. Our system provides (private data and copyright file) protection against unauthorized individual, those contents can be share without the fear of being sued.