1. A system for operating an expert-informed information acquisition engine utilizing an adaptive torrent-based heterogeneous network solution, comprising:
a memory storing computer-executable instructions;
a processor configured to access the at least one memory and execute the computer-executable instructions to:
receive user-defined tags associated with a first user;
access interaction data associated with one or more second users and the first user;
receive user-defined tags associated with one or more second users;
identify a lexicon based on the user-defined tags;
receive a query from the first user, wherein the query;
rank one or more documents based on the lexicon;
display one or more documents based on the lexicon.
2. The system of claim 1, the interaction data comprising inquiries, page views, purchases, shares, replies, messages, recommendations, blog entries, modification of a wish list, or a combination thereof associated with the one or more lexicon terms.
3. The system of claim 1, the one or more user-defined tags comprising association of one or more keywords to a document.
4. The system of claim 1, identifying a lexicon further comprises providing a negative filter removing one or more keywords and user-defined tags.
5. The system of claim 1, wherein the one or more documents are characterized by the absence of already-seen documents.
6. The system of claim 1, wherein identifying the lexicon further comprises weighing the user-defined tags associated with the one or more second users based at least in part on a frequency of interaction between the one or more second users and the first user.
7. The system of claim 6, wherein the lexicon is further based on receiving a trust criteria from the first user.
8. The system of claim 7 further comprising weighing the user-defined tags associated with the one or more second users based at least in part on the trust criteria from the first user.
9. A system for operating an expert-informed information acquisition engine utilizing an adaptive torrent-based heterogeneous network solution, comprising:
a memory storing computer-executable instructions;
a processor configured to access the at least one memory and execute the computer-executable instructions to:
receive from an webpage server, a data stream, the data stream being a two-part torrent stream, wherein a first part of the two-part torrent stream is a torrent stream containing one or more first documents and content-provider tags associated with the one or more documents and a second part of the two-part torrent stream is a stream updating the first part of the two-part torrent stream;
receive, from one or more users user-provided tags with the one or more documents;
associate user-provided tags with the one or more first documents; and
provide results to a user.
10. The system of claim 9, further comprising instructions provide a weighing criteria based at least in part on the one or more user-provided tags.
11. The system of claim 9, further comprising associating the content-provider tags and the user-provided tags with a plurality of related documents.
12. The system of claim 9, wherein providing results comprises providing results characterized by the absence of already-seen results.
13. The system of claim 12, further comprising storing the plurality of keywords in a datastore.
14. Computer-readable media storing computer-executable instructions that, when executed by a processor, configure the processor to implement a system for operating an expert-informed information acquisition engine utilizing an adaptive torrent-based heterogeneous network solution, by:
accessing interaction data comprising interactions between one or more users and one or more documents;
determining a relationship between the one or more users and a target user;
determining lexicon data based at least in part on the interaction data and the relationship with the target user; and
returning results to a user.
15. The computer-readable media of claim 14, the operations further comprising:
filtering the lexicon data to select lexicon data having a relationship counter greater than a pre-determined threshold; and
providing to a user device associated with the target user one or more document based at least in part on the filtered lexicon data responsive to a search query.
16. The computer-readable media of claim 15, the operations further comprising:
receiving a selection from a user device, wherein the selection comprises of one or more documents.
17. The computer-readable media of claim 16, the operations further comprising:
updating the filtering criteria for the lexicon based at least in part on the selection.
18. The computer-readable media of claim 15, wherein the results are characterized by the absence of already-seen results.
19. The computer-readable media of claim 14, the interaction data comprising a message entered by one of the one or more users.
20. The computer-readable media of claim 14, the operations further comprising:
filtering the lexicon data by one or more attributes specified by the target user.
21. A method for operating an expert-informed information acquisition engine utilizing an adaptive torrent-based heterogeneous network solution, comprising: comprising:
receiving a data stream, the data stream being a two-part torrent stream, wherein a first part of the two-part torrent stream is a torrent stream containing a first selection associated with a first result of a first query a second part is a torrent stream containing updates to data contained in the first stream;
identifying relevancy indicia associated with the selection;
determine one or more refines associated with the relevancy indicia; and
transmitting a second result of a second query, based at least in part on the first query and the one or more refines.
22. The method of claim 21, wherein identifying a relevancy indicia comprises receiving an input identifying a preference associated with a user.
23. The method of claim 22, wherein the preference indicates a similarity.
24. The method of claim 22, wherein the preference indicates a negative identifier.
25. The method of claim 21, wherein the relevancy indicia is based at least in part receiving a second selection from a user.
26. The method of claim 21, wherein the one or more refiner is based on related tags associated with a user’s ontology.
27. The method of claim 21, wherein the one or more refiners is based at least in part on one or more related tags associated with a related user.
28. The method of claim 21, wherein the one or more refiners is further based at least in part on popularity of the tags associated with all users.
29. The method of claim 21, wherein the second result is characterized by the absence of already-seen results.
30. An interface for tagging files, comprising an adaptive, torrent-based program interface configured to share user-authorized data, prioritize an information overlay upon an executing program, while communicating authorized data via a continuously updating torrent stream, wherein the interface is configure to wherein functionality for the interface is presented on screen in a graphical image of multiple icons grouped in a contiguous relationship, each icon representing a function related to interacting with a file, wherein icons in the plurality are grouped around a centrally-positioned search icon to form a first circumferential plurality of icons, and remaining icons in the plurality are grouped around the first circumferential plurality of icons to form an outer, second circumferential plurality of icons.
31. The interface of claim 30, wherein the graphical image is three-dimensional, having icons that are displayed when image is manipulated by a user to rotate in a three dimensional appearance on a display.
32. A method of searching a file system, comprising:
receiving a search request from a user;
determining the user’s interaction with files in a file system by at least one of a tracking the user’s history and an automated preset configured by one of a search engine and a file system; and
returning results of the search to the user, the results containing only files that the user has not seen before.
33. A method of searching a file system, comprising:
receiving a search request from a user;
determining the user’s interaction with files in a file system by at least one of a tracking the user’s history and an automated preset configured by one of a search engine and a file system; and
returning results of the search to the user, the results containing only files that the user has seen before.
34. A method of communication between users sharing files in a secured, private heterogeneous adaptive torrent-based network environment, comprising:
providing tags related to files, the tags created by users;
transmitting the tags through a first torrent stream; and
updating the tags through a second torrent stream.
35. A method of communication between users sharing files in a secured, private heterogeneous adaptive torrent-based network environment, comprising: transmitting files through a first torrent stream; and updating the files through a second torrent stream; each stream combining unique user identifiers for the first and second torrent streams.
36. The method of claim 35, wherein the unique identifiers, generated by an adaptive, torrent-based program interface configured to share user-authorized data, prioritize an information overlay upon an executing program, while communicating authorized data via a continuously updating torrent stream.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A method for implementing secure network communications between a first device and a second device, the first device communicating with the second device via a separate computer, the method comprising:
obtaining an encryption parameter that is shared by the first device, second device and separate computer;
copying a data packet sent by the first device, within the separate computer;
decrypting the copy of the data packet within a portion of the separate computer; wherein contents of the decrypted copy of the data packet is restricted to a pre-determined portion of the separate computer, the separate computer adapted for restricting all operators of the separate computer from accessing contents of the decrypted copy of the data packet; and
at the pre-determined portion of the separate computer; scanning the decrypted copy of the data packet for compliance with a predetermined criterion associated with the separate computer for allowing transmissions therethrough, the pre-determined portion of the separate computer adapted to provide only an affirmative response or a negative response regarding compliance with the predetermined criterion.
2. The method of claim 1, further comprising:
forwarding the data packet to the second device if the copy of the data packet complies with the predetermined criterion.
3. The method of claim 1, further comprising:
deleting the data packet if it does not comply with the predetermined criterion.
4. The method of claim 1, further comprising:
deleting the decrypted copy of the data packet once it has been scanned.
5. The method of claim 1, wherein the portion of the separate computer that is inaccessible to any operator of the separate computer is a hardware chipset within the separate computer.
6. The method of claim 1, wherein said obtaining an encryption parameter further comprises:
building a first secret key with the first device during a negotiation of a first security association;
building a second secret key, based on the first secret key, with the second device during a negotiation of a second security association;
communicating information to the first device that allows the first device to calculate the second secret key using the first secret key,
wherein the second secret key is used as the encryption parameter.
7. The method of claim 6, wherein public keys associated with the first device, second device, or separate computer are authenticated by virtue of their inclusion on a digital certificate.
8. The method of claim 6, wherein the information is a public key of the second device.
9. The method of claim 6, wherein the security associations are negotiated between the first device and a first address of the separate computer associated with the second device, and between the second device and a second address of the separate computer associated with the first device.
10. The method of claim 1, wherein said obtaining the encryption parameter further comprises:
negotiating, transparently through the separate computer, a first security association between the first device and the second device;
sharing the encryption parameter between the first and second devices using the first security association;
negotiating a second security association between the first device and the separate computer; and
sharing the encryption parameter between the first device and the separate computer through the second security association.
11. A firewall device for mediating communications between a private network device and a device external to a private network, the firewall device comprising:
an encryption parameter determining circuit operable to determine an encryption parameter that is known to the external device and the private network device;
a content scanner containing the encryption parameter and operable to decrypt contents of a transmission from the external device for scanning, said contents encrypted with said encryption parameter, said decrypted contents is restricted to be present only in said content scanner, said content scanner adapted for restricting all operators of the firewall device from accessing said decrypted contents,
wherein the content scanner permits a forwarding of the transmission to the private network device upon a determination that the contents of the transmission comply with a predetermined criterion of the firewall device, the content scanner adapted to provide only an affirmative response or a negative response regarding the determination that the contents of the transmission comply with the predetermined criterion.
12. The firewall device of claim 11,
wherein the content scanner is operable to copy the transmission and perfonn decryption and scanning of the copy of the transmission.
13. The firewall device of claim 12, further comprising:
a buffer for storing the transmission while the copy of the transmission is decrypted and scanned in the content scanner.
14. The firewall device of claim 11, wherein the encryption parameter determining circuit further comprises:
a first security association circuit operable to negotiate and manage a first security association with the external device; and
a second security association circuit operable to negotiate and manage a second security association with the private network device.
15. The firewall device of claim 14,
wherein the first security association circuit builds a first secret key with the external device and the second security association circuit builds a second secret key, based on the first secret key, with the private network device,
and further wherein the first security association circuit communicates information to the external device that allows the external device to construct the second secret key, whereupon the second secret key is used as the encryption parameter.
16. The firewall device of claim 11, wherein said encryption parameter determining circuit further comprises:
a security association circuit operable to negotiate a security association with one of the external device and the private network device,
wherein the firewall device obtains the encryption parameter comprising a secret key previously negotiated by the external device and the private network device.
17. The firewall device of claim 11, wherein the content scanner comprises a hardware chipset.
18. An article of manufacture, which comprises a computer readable medium having stored therein a computer program carrying out a method for scanning contents of an encrypted data packet, the computer program comprising:
a first code segment adapted for acquiring an encryption parameter adapted to be used by a first and second device to encrypt a data packet that is transmitted therebetween via the article of manufacture;
a second code segment adapted for decrypting the data packet, using the encryption parameter;
a third code segment adapted for restricting users of the article of manufacture from accessing contents of the data packet, said third code segment adapted for restricting the contents of the data packet to a pre-determined portion of said article of manufacture;
a fourth code segment adapted for filtering the data packet based on whether the contents comply with a predetermined criterion associated with the article of manufacture, said fourth code segment adapted to provide only an affirmative response or a negative response regarding a determination that the contents of the data packet comply with the predetermined criterion.
19. The article of manufacture of claim 18, further comprising:
a fifth code segment for copying the encrypted data packet; and
a sixth code segment for providing the copy of the encrypted data packet to the second, third and fourth code segments.
20. The article of manufacture of claim 19, further comprising:
a seventh code segment for storing the encrypted data packet during an operation of the second to sixth code segments,
wherein the seventh code segment forwards the encrypted data packet upon a notification by the fourth code segment that the contents comply with the predetermined criterion.
21. The article of manufacture of claim 18, wherein the encryption parameter is an encryption secret key negotiated jointly by the first device, second device and article of manufacture.
22. The article of manufacture of claim 21, wherein the encryption parameter is negotiated jointly as part of two independent security associations, a first of which is negotiated between the first device and the article of manufacture, and the second of which is negotiated between the article of manufacture and the second device.
23. The article of manufacture of claim 18, wherein the encryption parameter is an encryption secret key negotiated between the first and second device and thereafter shared with the article of manufacture via a security association negotiated between the article of manufacture and one of the first and second devices.
24. The article of manufacture of claim 18, wherein the second, third and fourth code segments reside on a hardware chipset within to article of manufacture.
25. A method of transmitting data, comprising:
constructing a first encryption parameter wit a firewall device tat receives and forwards traffic intended for a private network device associated therewith;
constructing with the firewall device, based on the first encryption parameter, a second encryption parameter that was previously negotiated between the firewall device and the private network device;
receiving at the firewall device a transmission that is encrypted wing the second encryption parameter
decrypting the received transmission, the decrypted transmission restricted to be present only in a predetermined portion of the firewall device, the firewall device adapted for restricting all operators of the firewall device from accessing the decrypted transmission, the predetermined portion of the firewall device adapted to provide only an affirmative response or a negative response regarding a determination that the received transmission complies with rules of the firewall device; and
sending the received transmission from the firewall device to the private network device.
26. The method of claim 25, wherein said constructing a first encryption parameter with a firewall device further comprises:
negotiating a security association with the firewall device; and
constructing a first encryption secret key with the firewall device during the security association.
27. The method of claim 26, further comprising constructing a second encryption secret key wit the firewall device during the security association, wherein the second encryption secret key is based on the first encryption secret key.
28. A method of transmitting data, comprising:
constructing an encryption parameter with a recipient device through a firewall device;
sharing the encryption parameter wit the firewall device;
encrypting a transmission using the encryption parameter;
decrypting the transmission, the decrypted transmission restricted to be present only in a predetermined portion of the firewall device, the firewall device adapted for restricting all operators of the firewall device from accessing contents of the decrypted transmission, the predetermined portion of the firewall device adapted to provide only an affirmative response or a negative response regarding a determination that the transmission complies with rules of the firewall device; and
sending the transmission to the recipient device via the firewall device.
29. The method of claim 28, wherein said constructing an encryption parameter further comprises:
constructing an encryption secret key during a first security association negotiation,
and further wherein said sharing the encryption parameter with the firewall device further comprises:
communicating the encryption secret key to the firewall device during a second security association negotiation.
30. A method of filtering encrypted data at a firewall device, comprising:
partitioning a filtering portion of the firewall device from an operator thereof;
decrypting the encrypted data within the filtering portion, the decrypted data restricted to be present only in the filtering portion of the firewall device, the firewall device adapted for restricting all operators of the firewall device from accessing contents of the decrypted data, the filtering portion of the firewall device adapted to provide only an affirmative response or a negative response regarding a determination that the decrypted data complies with rules of the firewall device; and
forwarding the data if it complies with at least one filtering rule associated with the firewall device.
31. The method of claim 30, further comprising:
negotiating an encryption parameter common to both a sending and receiving device of the encrypted data,
wherein the encryption parameter is used by the sending device to encrypt data for transmission and by the filtering portion to decrypt the encrypted data.
32. The method of claim 30, wherein said decrypting the encrypted data further comprises:
copying the encrypted data into the filtering portion;
decrypting the copy of the encrypted data; and
notifying a forwarding portion of the firewall device as to whether the decrypted copy complies with the at least one filtering rule.
33. A firewall device, comprising:
means for obtaining an encryption parameter common to both a first device and a second device;
means for decrypting encrypted data transmitted from the first device using the encryption parameter, the decrypted data restricted to be present only in a predetermined portion of said means for decrypting encrypted data, said means for decrypting encrypted data adapted for restricting all operators of said means for decrypting encrypted data from accessing contents of the decrypted data, said predetermined portion of said means for decrypting encrypted data adapted to provide only an affirmative response or a negative response regarding a determination that the decrypted data complies with rules of said means for decrypting encrypted data; and
means for forwarding the encrypted data to the second device.