Secure peer-to-peer based communication sessions via network operating system in secure data network

One or more non-transitory tangible media encoded with logic for execution by a machine and when executed by the machine operable for:

• receiving, by the one or more non-transitory tangible media implemented as a secure executable container that is executed by the machine implemented as an endpoint device, a request from an originating entity for initiating a secure peer-to-peer communication with a second network entity via a secure data network, the originating entity having established a two-way trusted relationship with the endpoint device in the secure data network, the originating entity further having established a corresponding two-way trusted relationship with the second network entity in the secure data network;
• processing the request based on providing the originating entity a sole and exclusive authority to control the secure peer-to-peer communication, the sole and exclusive authority including selectively cryptographically removing a data structure originated by the originating entity from any network device having received the data structure via the secure data network;
• and
• initiating the secure peer-to-peer communication based on securely sending, to the second network entity via the secure data network, a secure peer-to-peer invitation for the second network entity to join the secure peer-to-peer communication with the originating entity, the second network entity selectively joining the secure peer-to-peer communication.

An apparatus implemented as a physical machine, the apparatus comprising:

• non-transitory machine readable media configured for storing executable machine readable code implemented as a secure executable container;
• a device interface circuit;
• and
• a processor circuit configured for executing the machine readable code, and when executing the machine readable code operable for:
• receiving, by the secure executable container, a request from an originating entity for initiating a secure peer-to-peer communication with a second network entity via a secure data network, the apparatus implemented as an endpoint device, the originating entity having established a two-way trusted relationship with the endpoint device in the secure data network, the originating entity further having established a corresponding two-way trusted relationship with the second network entity in the secure data network,
• processing, by the secure executable container, the request based on providing the originating entity a sole and exclusive authority to control the secure peer-to-peer communication, the sole and exclusive authority including selectively cryptographically removing a data structure originated by the originating entity from any network device having received the data structure via the secure data network, and
• initiating, by the secure executable container, the secure peer-to-peer communication based on securely sending, to the second network entity via the secure data network, a secure peer-to-peer invitation for the second network entity to join the secure peer-to-peer communication with the originating entity, the second network entity selectively joining the secure peer-to-peer communication.