Directory server providing tag enforcement and network entity attraction in a secure peer-to-peer data network

A method comprising:

• establishing, by a first executable resource in a network device having joined a secure peer-to-peer data network, a registry providing a mapping between one or more network entities having been associated with a tag object by an identified user entity, each network entity represented by one of a federation identifier of a user entity or a corresponding data object, the tag object and each data object each having an enforceable lifetime, a corresponding unique identifier, and the federation identifier identifying a corresponding owner;
• receiving, by the first executable resource, a search request for one or more identified network entities having been tagged with the tag object, and in response generating a search result based on identifying the identified network entities having been mapped relative to the tag object, the search result identifying one or more of an identified federation identifier or an identified unique identifier for the respective identified network entities;
• and
• providing the search result by the first executable resource, the search result causing an endpoint device to attract the identified network entities for presentation by the endpoint device, wherein:
• the network device executing the first executable resource is the endpoint device attracting the identified network entities based on the search result;
• the tag object by the identified user entity is of a first tag object type that restricts usage and search scope to a federation scope comprising at least the endpoint device having been allocated the corresponding federation identifier of the identified user;
• the method further comprises a second executable resource in the endpoint device causing the attracting of at least a portion of the identified network entities, based on the second executable resource detecting creation of a conversation identified by a conversation object that references the tag object, and sending a secure invitation for joining the conversation to one of the identified network entities having a two-way trusted relationship with the identified user.

One or more non-transitory tangible media encoded with logic for execution by a machine and when executed by the machine operable for:

• establishing, by a first executable resource in the machine implemented as a network device having joined a secure peer-to-peer data network, a registry providing a mapping between one or more network entities having been associated with a tag object by an identified user entity, each network entity represented by one of a federation identifier of a user entity or a corresponding data object, the tag object and each data object each having an enforceable lifetime, a corresponding unique identifier, and the federation identifier identifying a corresponding owner;
• receiving, by the first executable resource, a search request for one or more identified network entities having been tagged with the tag object, and in response generating a search result based on identifying the identified network entities having been mapped relative to the tag object, the search result identifying one or more of an identified federation identifier or an identified unique identifier for the respective identified network entities;
• and
• providing the search result by the first executable resource, the search result causing an endpoint device to attract the identified network entities for presentation by the endpoint device;
• wherein the search request is for the one or more identified network entities having been tagged with the tag object and a second tag object, the tag object of a first tag object type granting the identified user entity an exclusive authority to establish an authoritative association with the one or more identified network entities, the second tag object of a second tag object type permitting association with any network entity by any user entity, the generating including:
• accessing a reference in the registry for the tag object for identification of first referenced network entities associated with the tag object;
• accessing a corresponding reference for the second tag object in a second registry, providing a mapping between tag objects of the second tag object type, for identification of second referenced network entities associated with the second tag object;
• and
• identifying the identified network entities belonging to the first referenced network entities and the second referenced network entities;
• wherein the causing an endpoint device to attract includes the endpoint device attracting the identified network entities based on selectively retrieving the identified network entities, from the secure peer-to-peer data network, based on a secure retrieval with at least a second network device having a two-way trusted relationship with the endpoint device.

One or more non-transitory tangible media encoded with logic for execution by a machine and when executed by the machine operable for:

• establishing, by a first executable resource in the machine implemented as a network device having joined a secure peer-to-peer data network, a registry providing a mapping between one or more network entities having been associated with a tag object by an identified user entity, each network entity represented by one of a federation identifier of a user entity or a corresponding data object, the tag object and each data object each having an enforceable lifetime, a corresponding unique identifier, and the federation identifier identifying a corresponding owner;
• receiving, by the first executable resource, a search request for one or more identified network entities having been tagged with the tag object, and in response generating a search result based on identifying the identified network entities having been mapped relative to the tag object, the search result identifying one or more of an identified federation identifier or an identified unique identifier for the respective identified network entities;
• and
• providing the search result by the first executable resource, the search result causing an endpoint device to attract the identified network entities for presentation by the endpoint device, wherein:
• the network device executing the first executable resource is the endpoint device attracting the identified network entities based on the search result;
• the tag object by the identified user entity is of a first tag object type that restricts usage and search scope to a federation scope comprising at least the endpoint device having been allocated the corresponding federation identifier of the identified user;
• the one or more non-transitory tangible media further operable for a second executable resource in the endpoint device causing the attracting of at least a portion of the identified network entities, based on the second executable resource detecting creation of a conversation identified by a conversation object that references the tag object, and sending a secure invitation for joining the conversation to one of the identified network entities having a two-way trusted relationship with the identified user.

An apparatus implemented as a physical machine, the apparatus comprising:

• non-transitory machine readable media configured for storing executable machine readable code;
• a device interface circuit;
• and
• a processor circuit configured for executing the machine readable code, and when executing the machine readable code operable for:
• establishing, by the apparatus implemented as a network device having joined a secure peer-to-peer data network, a registry providing a mapping between one or more network entities having been associated with a tag object by an identified user entity, each network entity represented by one of a federation identifier of a user entity or a corresponding data object, the tag object and each data object each having an enforceable lifetime, a corresponding unique identifier, and the federation identifier identifying a corresponding owner;
• receiving a search request for one or more identified network entities having been tagged with the tag object, and in response generating a search result based on identifying the identified network entities having been mapped relative to the tag object, the search result identifying one or more of an identified federation identifier or an identified unique identifier for the respective identified network entities;
• and
• providing the search result for an endpoint device, the search result causing the endpoint device to attract the identified network entities for presentation by the endpoint device;
• wherein the search request is for the one or more identified network entities having been tagged with the tag object and a second tag object, the tag object of a first tag object type granting the identified user entity an exclusive authority to establish an authoritative association with the one or more identified network entities, the second tag object of a second tag object type permitting association with any network entity by any user entity, the generating including:
• accessing a reference in the registry for the tag object for identification of first referenced network entities associated with the tag object;
• accessing a corresponding reference for the second tag object in a second registry, providing a mapping between tag objects of the second tag object type, for identification of second referenced network entities associated with the second tag object;
• and
• identifying the identified network entities belonging to the first referenced network entities and the second referenced network entities;
• wherein the causing an endpoint device to attract includes the endpoint device attracting the identified network entities based on selectively retrieving the identified network entities, from the secure peer-to-peer data network, based on a secure retrieval with at least a second network device having a two-way trusted relationship with the endpoint device.

An apparatus implemented as a physical machine, the apparatus comprising:

• non-transitory machine readable media configured for storing executable machine readable code;
• a device interface circuit;
• and
• a processor circuit configured for executing the machine readable code, and when executing the machine readable code operable for:
• establishing, by the apparatus implemented as a network device having joined a secure peer-to-peer data network, a registry providing a mapping between one or more network entities having been associated with a tag object by an identified user entity, each network entity represented by one of a federation identifier of a user entity or a corresponding data object, the tag object and each data object each having an enforceable lifetime, a corresponding unique identifier, and the federation identifier identifying a corresponding owner;
• receiving a search request for one or more identified network entities having been tagged with the tag object, and in response generating a search result based on identifying the identified network entities having been mapped relative to the tag object, the search result identifying one or more of an identified federation identifier or an identified unique identifier for the respective identified network entities;
• and
• providing the search result for an endpoint device, the search result causing the endpoint device to attract the identified network entities for presentation by the endpoint device, wherein:
• the network device executing the first executable resource is the endpoint device attracting the identified network entities based on the search result;
• the tag object by the identified user entity is of a first tag object type that restricts usage and search scope to a federation scope comprising at least the endpoint device having been allocated the corresponding federation identifier of the identified user;
• the machine readable code further comprising a second executable resource and when executed by the the processor circuit in the endpoint device causing the attracting of at least a portion of the identified network entities, based on the second executable resource detecting creation of a conversation identified by a conversation object that references the tag object, and sending a secure invitation for joining the conversation to one of the identified network entities having a two-way trusted relationship with the identified user.