SECURE PEER-TO-PEER DATA SYCHRONIZATION - DROPBOX, INC.
The disclosed embodiments relate to a feature of a content-item-uploading system that facilitates secure, peer-to-peer distributed sharing of a version of a content item by a user that created the version of the content item (e.g., by modifying a previous version of the content item or by creating a new content item). During operation, the system receives a cryptographic key from the user. In response, the system provides the cryptographic key to recipients in the system. Subsequently, the recipients can use the cryptographic key for secure, peer-to-peer distributed sharing of the version of the content item among the user and the recipients in a shared network without synchronization conflicts with previous versions of the content item in the system.
20100082973 Direct anonymous attestation scheme with outsourcing capability April, 2010 Brickell et al.
20090212636 Wireless desktop IT environment August, 2009 Cook et al.
20090182815 ACCELERATING PEER-TO-PEER CONTENT DISTRIBUTION July, 2009 Czechowski III et al.
20100011381 MAPE loop performance on system-wide basis January, 2010 Shah et al.
20060090078 Initiation of an application April, 2006 Blythe et al.
20080209222 METHOD OF CREATING PASSWORD SCHEMES FOR DEVICES August, 2008 Narayanaswami et al.
20090271618 ATTESTATION OF COMPUTING PLATFORMS October, 2009 Camenisch et al.
1. An electronic-device-implemented method, the method comprising: using the electronic device, generating a symmetric encryption key associated with a content item; encrypting the content item using the symmetric encryption key; encrypting the symmetric encryption key using a public encryption key for a recipient to generate an encrypted symmetric encryption key; providing the encrypted symmetric encryption keys and information specifying the recipient to a synchronization computer that communicates, via a shared network, with at least one electronic device associated with the recipient; and communicating the encrypted content item to instances of a client application executing on the at least one electronic device via secure peer-to-peer distributed sharing.
2. The method of claim 1, wherein the content item includes a modification relative to a previous version of the content item; and wherein the symmetric encryption key is different than a symmetric encryption key used to encrypt the previous version of the content item that was communicated among electronic devices using secure peer-to-peer distributed sharing.
3. The method of claim 1, further comprising: encrypting the symmetric encryption key using a second public encryption key for a second recipient to generate a second encrypted symmetric encryption key; providing the second encrypted symmetric encryption key and information specifying the second recipient to a synchronization computer that communicates, via a shared network, with at least one electronic device associated with the second recipient; and communicating the encrypted content item to instances of the client application executing on the at least one electronic device associated with the second recipient via secure peer-to-peer distributed sharing.
4. The method of claim 3, wherein the recipient and the second recipient are included within a common entity.
5. The method of claim 1, wherein, prior to encrypting the content item, the method further comprises dividing the content item into segments; and wherein the segments are encrypted using the symmetric encryption key and are communicated using secure peer-to-peer distributed sharing.
6. The method of claim 1, wherein the recipient is specified by a predefined list; and wherein, prior to encrypting the symmetric encryption key using the public encryption key for the recipient, the method further comprises accessing the predefined list to identify the recipient and the recipient's associated public encryption key.
7. The method of claim 1, wherein the secure peer-to-peer distribution involves a cryptographic protocol between an application layer and a transport layer.
8. A computer-program product comprising a non-transitory computer-readable storage medium and a computer-program mechanism embedded therein, the computer-program mechanism including: instructions for obtaining a predetermined symmetric encryption key associated with a content item; instructions for encrypting the content item using the symmetric encryption key; instructions for encrypting the symmetric encryption key using at least one encryption key for at least one recipient to generate at least one encrypted symmetric encryption key; instructions for providing the at least one encrypted symmetric encryption key and information specifying the at least one recipient to a synchronization computer that communicates, via a shared network, with electronic devices associated with the at least one recipient; and instructions for communicating the encrypted content item to instances of a client application executing on the at least one electronic device via secure peer-to-peer distributed sharing.
9. The computer-program product of claim 8, wherein the content item includes a modification relative to a previous version of the content item; and wherein the symmetric encryption key is different than a symmetric encryption key used to encrypt the previous version of the content item that was communicated using secure peer-to-peer distributed sharing.
10. The computer-program product of claim 8, wherein the computer-program mechanism further includes instructions for: encrypting the symmetric encryption key using a second public encryption key for a second recipient to generate a second encrypted symmetric encryption key; providing the second encrypted symmetric encryption key and information specifying the second recipient to a synchronization computer that communicates, via a shared network, with at least one electronic device associated with the second recipient; and communicating the encrypted content item to instances of the client application executing on the at least one electronic device associated with the second recipient via secure peer-to-peer distributed sharing.
11. The computer-program product of claim 10, wherein the recipient and the second recipient are included within a common entity.
12. The computer-program product of claim 8, wherein, prior to the instructions for encrypting the content item, the computer-program mechanism further includes instructions for dividing the content item into segments; and wherein the segments are encrypted using the symmetric encryption key and are communicated using secure peer-to-peer distributed sharing.
13. The computer-program product of claim 8, wherein the at least one recipient is specified by a predefined list; and wherein, prior to the instructions for encrypting the symmetric encryption key using the at least one public encryption key for the at least one recipient, the computer-program mechanism further includes instructions for accessing the predefined list to identify the at least one recipient and the at least one recipient's associated public encryption key.
14. A computer system, comprising: a processor; memory; and a program module, wherein the program module is stored in the memory and configurable to be executed by the processor, the program module including: instructions for accessing a predetermined symmetric encryption key associated with a content item on the computer system; instructions for encrypting the content item using the symmetric encryption key; instructions for encrypting the symmetric encryption key using a public encryption key for a recipient to generate an encrypted symmetric encryption key; instructions for providing the encrypted symmetric encryption key and information specifying the recipient to a synchronization computer that communicates, via a shared network, with at least one electronic device associated with the recipient; and instructions for communicating the encrypted content item to instances of the client application executing on the at least one electronic device via secure peer-to-peer distributed sharing.
16. The computer system of claim 14, wherein the program module further includes instructions for: encrypting the symmetric encryption key using a second public encryption key for a second recipient to generate a second encrypted symmetric encryption key; providing the second encrypted symmetric encryption key and information specifying the second recipient to a synchronization computer that communicates, via a shared network, with at least one electronic device associated with the second recipient; and communicating the encrypted content item to instances of the client application executing on the at least one electronic device associated with the second recipient via secure peer-to-peer distributed sharing.
17. The computer system of claim 16, wherein the recipient and the second recipient are included within a common entity.
18. The computer system of claim 14, wherein, prior to the instructions for encrypting the content item, the program module further includes instructions for dividing the content item into segments; and wherein the segments are encrypted using the symmetric encryption key and are communicated using secure peer-to-peer distributed sharing.
19. The computer system of claim 14, wherein the secure peer-to-peer distribution involves a cryptographic protocol between an application layer and a transport layer.
20. The computer system of claim 14, wherein the at least one recipient is specified by a predefined list; and wherein, prior to the instructions for encrypting the symmetric encryption key using the public encryption key for the recipient, the program module further includes instructions for accessing the predefined list to identify the recipient and the recipient's associated public encryption key.
This application claims priority under 35 U.S.C. §119(e) to U.S. Provisional Application Ser. No. 62/008,940, entitled "Secure Peer-to-Peer Data Synchronization," by Jesse Endahl and Anton Mityagin, Attorney docket number DPBX-191USP1, filed on Jun. 6, 2014, the contents of which are herein incorporated by reference.
The disclosed embodiments generally relate to techniques for peer-to-peer distributed sharing of content items (such as files) in a network. More specifically, the disclosed embodiments relate to a system that facilitates peer-to-peer distributed sharing of a version of a content item in the network by providing a cryptographic key to recipients in the network via a synchronization computer.
Users of an online content management system, such as the Dropbox™ service, provided by Dropbox, Inc., of San Francisco, Calif., often desire to share their files (and, more generally, content items) with other individuals. Peer-to-peer distributed sharing of the content items in such an online content management system can eliminate bottlenecks, thereby increasing the speed at which the content items can be shared among the individuals. In particular, in peer-to-peer distributed sharing, the individuals can directly transfer the content items from one computer or electronic device to another, instead of uploading and downloading the content items to and from remote storage in the online content management system.
However, synchronization conflicts can occur during peer-to-peer distributed sharing of a content item. For example, if an individual in the online content management system modifies and distributes the content item, this modified version of the content item will be different from the previous versions of the content item on the other electronic devices in the online content management system. Similar synchronization conflicts can occur when two individuals concurrently modify a content item. These synchronization conflicts make it difficult for the individuals to know whether a local copy of the content item is current, which may degrade the user's experience and, thus, may decrease the user's satisfaction with the online content management system.
The disclosed embodiments relate to a feature of a synchronized online content management system that facilitates peer-to-peer distributed sharing of a version of a content item by allowing a user that created the version of the content item (e.g., by modifying a previous version of the content item or by creating a new content item) to provide a cryptographic key (such as a one-way cryptographic hash function or a symmetric encryption key) to a server. For example, the server can be part of the synchronized online content management system (such as Dropbox™). In response, the server provides the cryptographic key to designated recipients (such as authorized recipients in a common entity, e.g., a company) in the synchronized online content management system. Subsequently, the recipients can use the cryptographic key during peer-to-peer distributed sharing of the version of the content item among the user and the recipients in a shared network (such as an intranet and/or the Internet) without synchronization conflicts with previous versions of the content item in the synchronized online content management system.
The peer-to-peer distributed sharing may not require uploading or downloading of the version of the content item to the server or the synchronized online content management system. However, dissemination of the version of the content item in the shared network can be accelerated by uploading or downloading the version of the content item (or segments of the version of the content item that are encrypted using the cryptographic key) to the server or the synchronized online content management system.
FIG. 1 illustrates a content management environment, which includes a synchronized online content management system, in accordance with the disclosed embodiments.
FIG. 2 illustrates the content management environment of FIG. 1 in accordance with the disclosed embodiments.
FIG. 3 illustrates a computer system in the content management environment of FIG. 1 in accordance with the disclosed embodiments.
FIG. 4 presents a flow chart illustrating a process for facilitating secure, peer-to-peer distributed sharing of a content item in accordance with the disclosed embodiments.
FIG. 5 presents a flow chart illustrating the process of FIG. 4 in accordance with the disclosed embodiments.
FIG. 6 illustrates a dashboard for an administrator in accordance with the disclosed embodiments.
Note that like reference numerals refer to corresponding parts throughout the drawings. Moreover, multiple instances of the same part are designated by a common prefix separated from an instance number by a dash.
The following description is presented to enable any person skilled in the art to make and use the present embodiments, and is provided in the context of a particular application and its requirements. Various modifications to the disclosed embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other embodiments and applications without departing from the spirit and scope of the present embodiments. Thus, the present embodiments are not limited to the embodiments shown, but are to be accorded the widest scope consistent with the principles and features disclosed herein.
The methods and processes described in the detailed description section can be embodied as code and/or data, which can be stored in a computer-readable storage medium as described above. When a computer system reads and executes the code and/or data stored on the computer-readable storage medium, the computer system performs the methods and processes embodied as data structures and code and stored within the computer-readable storage medium. Furthermore, the methods and processes described below can be included in hardware modules. For example, the hardware modules can include, but are not limited to, application-specific integrated circuit (ASIC) chips, field-programmable gate arrays (FPGAs), and other programmable-logic devices now known or later developed. When the hardware modules are activated, the hardware modules perform the methods and processes included within the hardware modules.
FIG. 1 shows content management environment 100 according to various embodiments. As may be understood from this figure, content management environment 100 includes a plurality of client devices 102A and 102E (collectively 102), and a synchronized online content management system 106 (also referred to as a "content management system"), which are all interconnected by one or more networks 108. Note that networks 108 may include: the Internet, World Wide Web (WWW), an intranet, a cellular-telephone network, LAN, WAN, MAN, or a combination of networks, or other technology enabling communication between computing systems. Various aspects of the client devices 102 and content management system 106 are discussed below.
In various embodiments, each client device 102 may selectively execute an online-service client application 110A and 110E (collectively 110) (also referred to as an "online client"), which may be used to manage content items (which may include files, such as audio, video, music, word-processor or data files and/or types of content or data having one or more formats, folders or containers that include multiple files or types of content, etc.) stored within a content management system 106. Noted that, in some embodiments, synchronized copies of content items (C.I.) 112A and 112E may be kept on content management system 106 and each respective client device 102. In some embodiments, client devices 102 may provide a file-browser type interface (not shown) for directly manipulating the content items stored on content management system 106 without maintaining a local copy.
Furthermore, client devices 102 may store unsynchronized copies of content items (C.I.) 120, such as different versions of one or more content items. These content items may or may not be stored on content management system 106. For example, a user of client device 102A may modify a previous version of a content item or may create content item 120A. This version of the content item may be different from other versions of this content item in content management environment 100, such as content item 120E on client device 102E and/or optional content item 120C on content management system 106.
Online-service client applications 110 may also support secure, peer-to-peer distributed sharing of content items among client devices 102 via the one or more networks 108. In particular, recipients among client devices 102 in a shared network (such as one or more networks 108) may receive content item 120A from client device 102A, and then may provide content item 120A to other recipients among client devices 102. (Note that the recipients may be specified by a predefined list 124 of recipients on at least a subset of client devices 102, which specifies the recipients.) These transfers of content item 120A may or may not be mediated by content management system 106. As shown in FIG. 2, which illustrates content management environment 100, the transfers of content item 120A (or segments of content item 120A, if content item 120A is transferred piecewise) may occur directly between client devices 102, and/or may, at least in part, occur indirectly by transfer from client device 102A to content management system 106, and then from content management system 106 to the recipients. The distributed sharing or transfer of content item 120A in content management environment 100 may remove bottlenecks and may improve performance. For example, the secure distributed sharing may accelerate the transfer of content item 120A among client devices 102 while content item 120A is being synchronized with content management system 106.
In order to ensure that the sharing or transfers of content item 120A (or segments of content item 120A) are secure, content item 120A (or segments of content item 120A) may be encrypted. For example, when the previous version is modified or when content item 120A is created, online-service client application 110A may generate cryptographic key (C.K.) 122 (such as a one-way cryptographic hash function or a symmetric encryption key) or select a predetermined cryptographic key 122 for content item 120A, and cryptographic key 122 may be used to subsequently encrypt content item 120A (or segments of content item 120A), e.g., on the fly or dynamically when content item 120A is shared. However, in order to be able to decrypt an encrypted form of content item 120A (or encrypted segments of content item 120A), the recipients in content management environment 100 need to know which cryptographic key was used in the encryption, or need to have access to cryptographic key 122. In addition, peer-to-peer distributed sharing of content item 120A among client devices 102 can result in synchronization conflicts with previous versions of this content item in content management environment 100 (such as content item 120B and/or optional content item 120C).
These challenges may be addressed in content management environment 100 by using content management system 106 to rapidly disseminate cryptographic key 122 to the recipients, thereby ensuring the ability to decrypt the encrypted form of content item 120A and to ensure synchronization. In particular, online-service client application 110A may provide cryptographic key 122 to content management system 106 via network(s) 108, and content management system 106 may provide cryptographic key 122 to the recipients in content management environment 100 via network(s) 108. For example, content management system 106 may access predefined list 124 of the recipients (such as multiple devices associated with a common user account, user accounts associated with a shared content item, and/or recipients in a common entity, e.g., an organization, a company, an educational institution, etc.), and may provide cryptographic key 122 to the recipients specified in predefined list 124. When a client device, such as client device 102B, receives cryptographic key 122 associated with content item 120A, online-service client application 110E may be alerted that other versions of this content item (such as content item 120B) are outdated. Alternatively, after receiving content item 120A, a recipient may request cryptographic key 122 from content management system 106, which then provides cryptographic key 122 to the recipient. In these ways, content management environment 100 may offer the benefits of centralized dissemination of version and encryption information with those of distributed sharing. Furthermore, because cryptographic key 122 may be specific to content item 120A or one or more segments of content item 120A (and, thus, may be different from cryptographic keys associated with previous or later versions of the content item), this communication technique may prevent conflicts occurring between different versions of content item 120A that are being distributed among client devices 102 using secure peer-to-peer distributed sharing.
In addition to restricting access to cryptographic key 122 based on predefined list 124, online-service client applications 110 may support recipient-specific encryption. In particular, online-service client application 110A may encrypt multiple versions of cryptographic key 122 using public encryption keys 126 of the recipients (which may be specified in predefined list 124). These encrypted encryption keys may be provided to content management system 106 for subsequent distribution to the recipients (either automatically based on predefined list 124 or in response to requests from the recipients). Thus, a particular recipient may receive an encrypted cryptographic key 122 that was encrypted using the recipient's public encryption key. Then, this recipient can decrypt the encrypted cryptographic key 122 using their private encryption key, which will allow the recipient to decrypt content item 120A (or one or more segments of content item 120A) using the decrypted cryptographic key 122. Note that content management system 106 may or may not have access to the private encryption keys of the recipients and, thus, may or may not be able to decrypt encrypted cryptographic key 122 or encrypted content item 120A.
In some embodiments, prior to the secure peer-to-peer distributed sharing of content item 120A, predefined list 124 and/or public encryption keys 126 may be provided to at least the subset of client devices 102 by one of client devices 102 (such as client device 102A) that acts as an administrator for the common entity. For example, when a new recipient or member joins the common entity, the administrator may distribute a revised predefined list 124 and/or a public encryption key for the new recipient to at least the subset of client devices 102. This distribution may occur directly between client devices 102, and/or may, at least in part, occur indirectly by transfer from client device 102A to content management system 106, and then from content management system 106 to the recipients.
Client devices 102 may also include messaging clients 114A and 114E (collectively 114) for receiving and sending messages associated with messaging module 104. For example, the messages may include: text messages, emails, rich site summary (RSS) feeds, etc. Note that messaging clients 114A and 114E can be web-based or native-client-based messaging clients. Messaging client 114A may provide cryptographic key 122, while messaging client 114E may receive cryptographic key 122.
While only two client devices 102A and 102B are shown in FIG. 1, for purposes of clarity, it should be understood by those skilled in the relevant field that many client devices 102 may simultaneously connect through network(s) 108 to content management system 106 at any given time. Examples of suitable client devices 102 include, but are not limited to, a personal or desktop computer, a mobile computing device (such as a laptop, a subnotebook/netbook, a personal digital assistant, or a tablet computer), or a portable electronic device (such as a cellular phone or a smartphone, e.g., an iPhone®, BlackBerry®, or Android™-based smartphone). As discussed previously, each client device 102 may store a local, synced copy of one or more content items from within content management system 106, and the content items may be stored in any suitable content-item format. When one of online-service client applications 110 presents content items that are stored within the content-item storage system to a user, the content items may be arranged in folders (or containers) and the folders themselves may be arranged in other folders, or in any other arbitrary arrangement supported by content management system 106, as determined by the user. However, one of skill in the art should understand in light of this disclosure that each user's content-item-storage architecture may be considerably different from the next, and in some instances, the content-item-storage architecture may be implemented to maximize storage and content-item retrieval efficiency.
Content management system 106 stores content items and manages access to the content items via client devices 102. As described further below with reference to FIG. 3, content management system 106 and its components may be implemented using any appropriate hardware and software for content-item serving, storage, and retrieval functions. For example, content management system 106 may be implemented in the form of a single server or multiple servers.
In various embodiments, content management system 106 includes: messaging module 104, interface module 116, account module 118, data store 128 and authorization module 130. Each of these elements of content management system 106 is discussed below.
Messaging module 104 may communicate information with client devices 102 and, in particular, with messaging clients 114. For example, messaging module 104 may receive cryptographic key 122 associated with content item 120A from client device 102A, and may provide cryptographic key 122 to the recipients.
In particular embodiments, interface module 116 may facilitate content-item access and content-item storage among content management system 106 and client devices 102. Interface module 116 may receive content items from and send content items to client devices 102 consistent with the user's preferences for sharing content items. Interface module 116 may act as the counterpart to a client-side content-item-explorer style user interface that allows a user to manipulate content items directly stored on content management system 106. In some embodiments, software operating on client devices 102 may integrate network-stored content items with the client's local content-item system to enable a user to manipulate network-stored content items through the same user interface (UI) used to manipulate content items on the local content-item system, e.g., via a file explorer, file finder or browser application. As an alternative or supplement to the client-side content-item-explorer interface, interface module 116 may provide a web interface for client devices 102 to access (e.g., via a suitable one of online-service client applications 110) and allow a user to manipulate content items stored within content management system 106. In this way, the user can directly manipulate content items stored within content management system 106.
As described previously, interface module 116 may receive the encrypted form of content item 120A (or the encrypted segments of content item 120A) from client device 102A, and may assist in disseminating the encrypted form of content item 120A (or the encrypted segments of content item 120A) to the recipients. Note that the secure, peer-to-peer distributed sharing of content item 120A among the recipients may occur in lieu of synchronization of content item 120A in content management environment 100 via content management system 106, or may supplement the synchronization of content item 120A in content management environment 100 via content management system 106.
In various embodiments, data store 128 may store content items such as those uploaded using client devices 102, or using any other suitable computing device. In the embodiment illustrated in FIG. 1, client device 102A, which is associated with a first user, is shown as locally storing at least content item 112A, and client device 102B, which is associated with a second user, is shown as locally storing at least content item 112B. As shown in FIG. 1, copies of the locally stored content items are maintained in data store 128 of content management system 106.
In various embodiments, data store 128 may maintain information identifying the user, information describing the user's content-item directory, and other information in a content-item journal that is maintained for each user. In some embodiments, the content-item journal may be maintained on content management system 106, and in other embodiments, a content-item journal (e.g., a 'server-side content-item journal') may be maintained on content management system 106 and locally on each client device 102. In various embodiments, the content-item journal may be used to facilitate the synchronization of the various copies of a particular content item that are associated with a user's account.
As illustrated in FIG. 1, the system may be configured so that any changes that are made to content item 112A on particular client device 102A may also be automatically reflected in the copy of content item 112A stored within content management system 106 (subject to the delay, if any, associated with uploading content item 112A or the changes to content item 112A from client device 102A to content management system 106). Similarly, any changes that are made to content item 112A on content management system 106 may also be automatically reflected in the copy of content item 112A stored on client device 102A (subject to the delay, if any, associated with downloading content item 112A or the changes to content item 112A from content management system 106 to client device 102A).
Furthermore, as discussed previously, data store 128 may also include: cryptographic key 122, predefined list 124 of recipients, optional public encryption keys 126, previous version(s) of unsynchronized content items (such as optional content item 120C), and, optionally, content item 120A (or segments of content item 120A), which may be encrypted. This information may be used to facilitate the secure, peer-to-peer distributed sharing of content item 120A.
In particular embodiments, account module 118 may track content items stored in data store 128 and entries in the server-side content-item journal for each content item. As users grant content-item access permissions to other users (e.g., by including users in predefined list 124 of recipients), account module 118 may update the server-side content-item journal associated with each relevant user in data store 128. Account module 118 may also track client devices 102 that are associated with each user's account. For example, a user may want to share all their content items among their desktop computer, tablet computer, and mobile device. To make such a sharing arrangement seamless to the user, the user's single account on content management system 106 may be associated with each of the user's respective client devices. In some embodiments, an application running on each respective client device 102 may help to coordinate synchronization of content items on the client device with corresponding versions of the content items within the user's account in content management system 106, and also with corresponding versions of the content items stored on the user's various other client devices.
In various embodiments, after cryptographic key 122 is received, authorization module 130 accesses predefined list 124 of recipients. Then, messaging module 104 provides cryptographic key 122 to the specified recipients. Alternatively, messaging module 104 may receive requests for cryptographic key 122 from one or more client devices 102. In response, authorization module 130 accesses predefined list 124 of recipients to confirm that the one or more client devices 102 are included in the specified recipients prior to messaging module 104 providing cryptographic key 122.
FIG. 3 presents a block diagram of a computer system 300 in content management environment 100 in FIG. 1, such as content management system 106. This computer system includes processing subsystem 302, memory subsystem 304, and networking subsystem 306 all coupled together and communicating through bus 308.
Processing subsystem 302 includes one or more devices configured to perform computational operations. For example, processing subsystem 302 can include one or more microprocessors, application-specific integrated circuits (ASICs), microcontrollers, application processors, and/or programmable-logic devices.
Memory subsystem 304 includes one or more devices for storing data and/or instructions for processing subsystem 302, and networking subsystem 306. For example, memory subsystem 304 can include any type of computer-readable storage medium, such as dynamic random access memory (DRAM), static random access memory (SRAM), and/or other types of memory. In addition, memory subsystem 304 can include mechanisms for controlling access to the memory. In some embodiments, memory subsystem 304 includes a memory hierarchy that comprises one or more caches coupled to a memory in computer system 300. In some of these embodiments, one or more of the caches is located in processing subsystem 302. Memory subsystem 304 may store one or more program modules or computer-program mechanisms with instructions for operations that implement the secure, peer-to-peer distributed sharing of content items, which may be executed by processing subsystem 302, such as: messaging module 104, authorization module 130 in FIG. 1 and encryption/decryption module 312.
Moreover, memory subsystem 304 may store operating system 310 (as program code), which may be executed by processing subsystem 302. In general, operating system 310 serves as an intermediary between system hardware in computer system 300 and software applications executed by processing subsystem 302. For example, operating system 310 can be, but is not limited to, the iOS operating system or OS X® operating system, both from Apple Inc. of Cupertino, Calif.; Windows Phone from Microsoft Corporation of Redmond, Wash.; Android from the Open Handset Alliance of Mountain View, Calif.; the FreeBSD operating system from The FreeBSD Foundation of Boulder, Colo.; or another operating system. Operating systems and their general functions are known in the art and hence are not described in detail.
In order to manage the transfer of packets (such as the encrypted form of content item 120A or the encrypted segments of content item 120A in FIG. 1) to and from the software applications and operating system 310 in computer system 300 using an appropriate interface circuit or communication subsystem in networking subsystem 306, operating system 310 maintains one or more network or communication protocol stacks (not shown) that each includes a number of logical layers. For example, operating system 310 can maintain a cellular protocol stack and/or an Internet protocol stack, which includes the link, Internet, transport, and application layers. As another example, operating system 310 can maintain a protocol stack based on the OSI model, which includes: the application, presentation, session, transport, network, data-link, and physical layers. At corresponding layers of the protocol stack, operating system 310 includes control mechanisms and data structures for performing the functions associated with the layer. The secure, peer-to-peer distribution in FIG. 1 of the encrypted form of content item 120A (or the encrypted segments of content item 120A) may involve a cryptographic protocol between an application layer and a transport layer that uses cryptographic key 122. For example, the cryptographic protocol may include Secure Socket Layer (SSL). Alternatively or additionally, a transport-layer-security cryptographic protocol may be used.
Memory subsystem 304 may be coupled to one or more high-capacity mass-storage devices (not shown). For example, memory subsystem 304 can be coupled to a magnetic or optical drive, a solid-state drive, or another type of mass-storage device. Moreover, memory subsystem 304 can be used by computer system 300 as fast-access storage for often-used data, while the mass-storage device is used to store less frequently used data.
Networking subsystem 306 includes one or more devices (such as communication subsystems or chips) configured to couple to and communicate on a wired and/or wireless network (i.e., to perform network operations), such as one or more cellular packet data and cellular-telephone networks (e.g., 3G/4G networks), and WLAN networks, including portions based on standards described in IEEE 802.11 (such as a Wi-Fi networking system). Networking subsystem 306 can include a Bluetooth networking system, which may include Bluetooth low energy capabilities, a universal serial bus (USB) networking system, an Ethernet networking system, and/or another networking system. Networking subsystem 306 includes processors, controllers, radios/antennas, sockets/plugs, and/or other devices used for coupling to, communicating on, and handling data and events for each supported networking system.
Processing subsystem 302, memory subsystem 304, and networking subsystem 306 are coupled using bus 308. Bus 308 is an electrical, optical, or electro-optical connection that the subsystems can use to communicate commands and data among one another. Although only one bus 308 is shown for clarity, different embodiments can include a different number or configuration of electrical, optical, or electro-optical connections among the subsystems.
Although shown as separate subsystems in FIG. 3, in some embodiments, some or all of a given subsystem can be integrated into one or more of the other subsystems in computer system 300. Although alternative embodiments can be configured in this way, for clarity we describe the subsystems separately.
Computer system 300 can be (or can be included in) any device with at least one processing subsystem and one networking subsystem. For example, computer system 300 can be (or can be included in): a personal or desktop computer, a laptop computer, a mainframe computer, a subnotebook/netbook, a tablet computer, a network appliance, a server, and/or another computing device.
Computer system 300 may also include one or more additional processing subsystems 302, memory subsystems 304, and/or networking subsystems 306. Additionally, one or more of the subsystems may not be present in computer system 300. Furthermore, although we use specific subsystems to describe computer system 300, in alternative embodiments, computer system 300 may include one or more additional subsystems that are not shown in FIG. 3. For example, computer system 300 may also include, without limitation: a data collection subsystem, an alarm subsystem, an audio subsystem, a display subsystem and/or an input/output (I/O) subsystem. Moreover, computer system 300 may include a display subsystem which can include any type of display technology such as: a light-emitting diode (LED); an organic light-emitting diode (OLED); a liquid crystal display (LCD), such as thin film transistor (TFT); and/or other types of display technology. In addition, the display subsystem may include mechanisms for processing data, and/or other information for display and may also include an audio subsystem for producing sound.
FIG. 4 presents a flow chart illustrating a process 400 for facilitating secure, peer-to-peer distributed sharing of a content item, which may be performed by a system. For example, process 400 may be performed by modules or components in content management system 106 in FIG. 1, including: messaging module 104 and authorization module 130. During operation, the system receives a cryptographic key from a client application on an electronic device (operation 404) in a set of electronic devices that communicate via a shared network, where the cryptographic key is associated with a version of the content item, and the version of the content item includes modified content relative to at least a previous version of the content item. For example, a user of client device 102A may modify a previous version of content item 120A or create content item 120A (such as a version of a document or software). Online-service client application 110A may create cryptographic key 122 (using a cryptographic technique) or select predetermined cryptographic key 122 associated with content item 120A. This cryptographic key may be used to encrypt content item 120A (or segments of content item 120A) so that subsequent sharing is secure, and online-service client application 110A may instruct content management system 106 to upload cryptographic key 122 in FIG. 1. Note that the content item may be a container that includes multiple content items, such as a collection, a folder, a playlist, an album, etc. In some embodiments, prior to providing the cryptographic key, online-service client application 110A encrypts multiple versions of the cryptographic key using public encryption keys of the recipients that are specified in predefined list 124, and these encrypted cryptographic keys are provided to the system in operation 404.
Then, the system provides the cryptographic key associated with the version of the content item to client applications on a subset of the electronic devices (operation 406), i.e., the recipients. For example, after messaging module 104 in content management system 106 in FIG. 1 receives cryptographic key 122, authorization module 130 may access predefined list 124 of the recipients, and messaging module 104 may provide cryptographic key 122 to the recipients. However, in other embodiments, cryptographic key 122 is provided to all of client devices 102 that share network(s) 108 (i.e., the recipients may not be restricted by predefined list 124). Alternatively, after the recipients receive the content item in operation 410, they may request cryptographic key 122 and, in response to these requests, the system may provide cryptographic key 122. By providing the cryptographic key, the system may facilitate the secure, peer-to-peer distributed sharing of the version of the content item among the subset without synchronization conflicts between the version of the content item and the previous version of the content item in the set of electronic devices because the different versions of the content item may be encrypted with different cryptographic keys. In particular, cryptographic key 122 may be used by client devices 102 of the recipients to perform encryption/decryption of content item 120A.
Note that the system may have optionally previously received predefined list 124 of recipients (operation 402) from an administrator for a common entity, such as: an organization, a company, an educational institution, etc. In particular, messaging module 104 in FIG. 1 may have received predefined list 124 of recipients from a messaging client on the administrator's client device (such as messaging client 114A on client device 102A).
Once the cryptographic key has been provided to the client applications (operations 406), the system may perform the secure, peer-to-peer distributed sharing of the version of the content item among at least the subset of the set of electronic devices (operation 410). For example, online-service client application 110A in client device 102A in FIG. 1 may share the encrypted form of content item 120A (or the encrypted segments of content item 120A) with online-service client applications 110 in other client devices 102, such as a subset of client devices 102 used by the recipients. During the sharing of the encrypted form of content item 120A (or the encrypted segments of content item 120A), online-service client application 110A in client device 102A may automatically sign the shared encrypted form of content item 120A (or the encrypted segments of content item 120A). Moreover, online-service client applications 110 in other client devices 102 may be programmed to trust online-service client application 110A in client device 102A.
In some embodiments, the secure, peer-to-peer distributed sharing of the version of the content item is supplemented using the synchronized online content management system. In particular, the system may optionally synchronize the version of the content item with the subset of the set of electronic devices (operation 412). Therefore, prior to the optional synchronization (operation 412), the system may optionally receive an encrypted form of the version of the content item (or encrypted segments of the version of the content item) from the client application on the electronic device (operation 408). Note that the system may or may not decrypt the version of the content item or the encrypted segments of the version of the content item. For example, online-service client application 110A in client device 102A in FIG. 1 may transfer the encrypted form of content item 120A (or the encrypted segments of content item 120A) to interface module 116 in content management system 106, and interface module 116 may provide the encrypted form of content item 120A (or the encrypted segments of content item 120A) to online-service client applications 110 in the other client devices 102, such as a subset of client devices 102 used by the recipients.
Process is further illustrated in FIG. 5, which shows the interaction among client device 102A, content management system 106 and client device 102B. For example, a user of client device 102A may modify (operation 502) or create the version of content item 120A. When this occurs, cryptographic key 122 associated with content item 120A may be generated or selected by online-service client application 110A. This cryptographic key may be used to encrypt content item 120A (or segments of content item 120A), and online-service client application 110A may instruct content management system 106 to upload cryptographic key 122. During the uploading, messaging client 114A in client device 102A may provide (operation 504) and messaging module 104 in content management system 106 may receive (operation 506) cryptographic key 122. Prior to providing the cryptographic key, online-service client application 110A may encrypt multiple versions of cryptographic key 122 using public encryption keys of the recipients, and these encrypted cryptographic keys are provided to and received by content management system 106 in operations 504 and 506.
If the secure, peer-to-peer distribution is facilitated, at least in part, by content management system 106, then online-service client application 110A in client device 102A may optionally provide (operation 508) and interface module 116 in content management system 106 may optionally receive (operation 510) the encrypted form of content item 120A (or the encrypted segments of content item 120A). In particular, content item 120A (or the segments of content item 120A) may be encrypted using cryptographic key 122.
Then, authorization module 130 in content management system 106 may confirm the recipients (operation 512) by accessing predefined list 124, which may have been previously provided by an administrator for a common entity and received by messaging module 104 in content management system 106.
Once cryptographic key 122 has been provided to client devices 102, online-service client applications 110 may perform secure, peer-to-peer distributed sharing of the encrypted form of content item 120A (operation 518) among at least the subset of client devices 102.
In some embodiments, interface module 116 in content management system 106 optionally performs synchronization (operation 520) of the encrypted form of content item 120A (or the encrypted segments of content item 120A) with online-service client applications 110 in the other client devices 102, such as a subset of client devices 102 used by the recipients. For example, content management system 106 may synchronize the encrypted form of content item 120A (or the encrypted segments of content item 120A) with online-service client application 110E in client device 102B. In this way, the secure, peer-to-peer distributed sharing of the encrypted form of content item 120A may be supplemented using the synchronized online content management system 106.
In some embodiments of process 400, there may be additional or fewer operations. Moreover, the order of the operations may be changed, and/or two or more operations may be combined into a single operation.
In an exemplary embodiment, the secure, peer-to-peer distributed sharing is used to accelerate synchronization among client devices in a synchronized online content management system. In general, synchronizing content items in the synchronized online content management system may be slow because it may only download a given content item from one client device, even when other client devices on the same network have the content item. Moreover, if another client device requests the same content item, the same original client device may respond, so that the synchronized online content management system and the other client device are simultaneously downloading the content item from the client device, which may adversely affect performance.
A solution for this problem is to use secure, peer-to-peer distributed sharing of content items among client devices and/or the synchronized online content management system. For example, SSL-based peer-to-peer distributed sharing (such as BitTorrent from BitTorrent, Inc. of San Francisco, Calif.) may be used by a client device to obtain a content item from multiple other client devices (such as other client devices on the same shared network) to improve performance. More generally, a variety of protocols that enable swarming or peer-to-peer distributed sharing may be used. This approach may be useful for groups users that have significant overlap of content items between accounts, and which use a shared network.
A technique such as BitTorrent over SSL may be useful for applications in which content items are distributed to a closed, but large group of users (such as users in a common entity). Moreover, by using SSL, the publisher of a torrent (such as the user of client device 102A in FIG. 1) can require peers to properly authenticate in the SSL handshake. Furthermore, each peer can verify that all peers they are connected to are allowed onto the swarm by the publisher by making sure they can present an authorization certificate signed by the administrator (for example, a recipient may receive an authorization certificate when the recipient is added to predefined list 124 in FIG. 1). Alternatively or additionally, authorization certificates signed by the publisher may be distributed to the recipients by synchronized online content management system. Note that SSL supports two-way authentication.
The secure, peer-to-peer distributed-sharing technique may dynamically encrypt the content item being shared on the fly (as opposed to distributing a pre-encrypted file). This approach may eliminate the need to make a copy of the content item in order to decrypt it at the end points in the synchronized online content management system. In addition, SSL may be compatible with other authentication techniques, such as: an HTTPS tracker in conjunction with the authentication certificate to authenticate the HTTPS tracker; and/or web seeds.
In an exemplary embodiment, SSL support is implemented in libtorrent. The .torrent file may contain an X.509 certificate from the publisher (such as the user of client device 102A in FIG. 1). The private key part of the certificate may be used to sign peer certificates (such as authorization certificates) to grant them access to the torrent.
If a peer finds an X.509 certificate in the torrent file, it may require a signed certificate from the publisher, and it may require all peers connecting to that torrent to present a valid and signed certificate in the SSL handshake. In particular, the certificate may be signed by the holder of the certificate in the .torrent file, which acts as a root certificate authority (which may be the only root certificate authority), and all the certificates may only use a single hop to the root.
Because a publisher may want to be able to re-use the root certificate for multiple torrents, the CommonName field (or the SubjectAltName field), which typically contains the hostname, may contain either the name of the torrent (e.g., in the 'name' field) or '* ' (which indicates that any torrent is acceptable). Peers may honor this by verifying that this field matches when accepting connections. This approach may allow the publisher to use a single cryptographic key, with a single tracker, for multiple torrents, with different access control for each torrent.
Because one peer may participate in multiple torrents, the server name indication (SNI) extension to the transport layer security may be used to indicate the torrent a peer is connecting to. Any outgoing SSL connection may set the SNI field to the hex-encoded information-hash of the torrent (i.e., cryptographic key 122 in FIG. 1). Moreover, because this occurs during the SSL handshake, it may occur before the BitTorrent protocol indicates which information-hash it is using. In the case of SSL, it may be required that the BitTorrent-level information-hash matches the one specified in the SNI field. If the BitTorrent-level information-hash does not match the one specified in the SNI field, the connection may be dropped. Furthermore, if there is no SNI field in an incoming connection, it may be dropped.
If the tracker of an SSL-torrent uses HTTPS, the synchronized online content management system may be expected to present a certificate signed by the same root certificate that is in the .torrent file. This may close the loop to ensure properly authenticated trackers by verifying something in the .torrent file (which is controlled by the publisher). This same criterion may be expected from any web seed with an HTTPS uniform resource locator.
In some embodiments, a BitTorrent over SSL uses the unique and identifying keys each peer has to sign piece requests (or some sort of digital coin or identifier) to prove that a content item was uploaded to a recipient. Using this approach, a tracker may not have to rely on the statistics reported by the client devices.
While the preceding examples illustrate the secure, peer-to-peer distributed-sharing process with the cryptographic key generated or selected on the client device where the version of the content item was modified or created, in other embodiments the cryptographic key is generated or selected on the synchronized online content management system and provided to the client device where the version of the content item is modified or created. Moreover, requests for joining predefined list 124 and/or requests for the synchronized online content management system to provide the cryptographic key may be sent to the administrator for approval. FIG. 6 illustrates a dashboard 600 for the administrator that can be used to authorize requests. For example, the administrator can select a particular request (such as that from client device A) by clicking on it, and can either approve it or reject it. Alternatively, the requests may be automatically approved, e.g., if the publisher is in the common entity.
Note that operations in the secure, peer-to-peer distributed sharing may be performed automatically without direct user action. For example, after the user modifies or creates the version of the content item, the client devices and the synchronized online content management system may perform the remaining operations in process 400 (FIG. 4). However, predefined list 124 (FIG. 1) of recipients may be generated manually by the administrator.
While the preceding embodiments illustrated the use of a symmetric cryptographic key, in other embodiments the client device encrypts multiple versions of the modified version of the content item using public encryption keys associated with the recipients. These encrypted versions of the content item may be communicated among at least the subset of the client devices using the secure, peer-to-peer distributed sharing. In these embodiments, the cryptographic key may not be provided to synchronized online content management system. Instead, synchronized online content management system may facilitate sharing of public encryption keys among at least the subset of the client devices.
In the preceding description, we refer to 'some embodiments.' Note that 'some embodiments' describes a subset of all of the possible embodiments, but does not always specify the same subset of embodiments.
The foregoing descriptions of embodiments have been presented for purposes of illustration and description only. They are not intended to be exhaustive or to limit the present description to the forms disclosed. Accordingly, many modifications and variations will be apparent to practitioners skilled in the art. Additionally, the above disclosure is not intended to limit the present description. The scope of the present description is defined by the appended claims.


Know Parlier High Class of 1993 graduates that are NOT on this List? Help us Update the 1993 Class List by adding missing names.
More 1993 alumni from Parlier HS have posted profiles on Classmates.com®. Click here to register for free at Classmates.com® and view other 1993 alumni.
The students that went to school at the Parlier high school called Parlier High School and graduated in '93 are on this page. Register to add your name to the class of 1993 graduates list.


"This was the worst day of my life!" my son hissed.
My seven-year-old son wrapped his arms around his head and tried his best to "shut out the world," including me. My first thought was to convince him things weren't so bad, and that tomorrow would be a better day. But by doing that, I'd also convince him that I didn't understand his feelings, and what he was going through.
"Sounds like a pretty rotten day," I replied.
Later that night, I thought about my son's anger and his rapid recovery. I thought about how much more our kids share with us these days, and how little I shared with my parents. And I thought of what a blessing it is to have a son who's able to share his life with me.
Back in the days of seeing and not hearing children, parents could often skip the part of parenting that involved listening closely and empathizing with their children. They could tell their kids to "shape up" or "stop whining" when they were struggling, and they could control them with fear. Children would respond by stuffing feelings down and holding onto their anger for long periods of time.
After my son had shared his feelings with me, I shared with him how glad I was that he could tell me what was bothering him. I told him that "anger energy" needs to be released from your body, or it starts to grow. And I shared that I was glad he didn't have to stay angry as long as I did when I was a child, because I didn't learn the "secret" of talking about my problems with someone I loved.
If we are to listen well, we must open ourselves to the good, the bad, and the ugly in our children. At times, it is excruciatingly difficult to listen, when we want them to "get over it." But all they need is one comment to show them we understand, and their mood shifts before us. All we need is to understand that kids are not adults, and that they often feel their emotions more strongly than we do.
They will remember how you responded to their emotions for the rest of their life.
So the next time your child is struggling, remember the blessings within the struggle. Remember the opportunity to join your child with kindness and compassion.
Finally, remember that if you really want your child to "get over it," you'll have to get over it first.
Mark Brandenburg MA, CPCC, coaches parents by phone to balance their life and improve their family relationships. He is an Instructor for the Academy for Coaching Parents and author of "Secrets of Emotionally Intelligent Fathers" Ecourse: http://www.markbrandenburg.com/25_secrets.htm and http://www.markbrandenburg.com/marks_ebooks_and_courses.htm.


The Atlantis Marine Power site, http://www.atlantismarine.co.uk and any related web services delivered by Atlantis Marine Power Ltd on partner sites ("Site"), are owned and operated by Atlantis Marine Power Ltd.
We sometimes request users of the Site to provide personally identifiable information. For example, in order to use our contact form, you will be required to submit certain personally identifiable information. The information collected from you is strictly voluntary. You may decline to submit personally identifiable information, in which case we may not be able to provide certain services to you. The type of information collected during the registration process may include your contact information, such as your name, email address, postal address, phone number and country of residence ("Registration Information"). You may choose to provide optional profile information such as your real name, photo, company/organisation affiliation, profile description, tags, location and other information which may be collected and displayed on your public profile. It is your choice to post content (for example, company affiliation) and make it publicly available. You are solely responsible for the content you post.
Access to your personal information is restricted to use by Atlantis Marine Power Ltd. We do share non-personally-identifiable information (such as anonymous usage data, referring / exit pages and URLs, platform types, number of clicks, and user location) with interested third-parties to assist with understanding the usage patterns for certain content, services, advertisements, promotions, and/or functionality for the Site.
You may, at any time, request to view all the information we hold about you by emailing sales@atlantismarine.com. We will endeavour to respond within 3 working days.
Should you request data withdrawal, we will first provide you with all the data we hold about you, then confirm completion of the withdrawal request via the email address you have provided within 72 hours unless we receive communication by you to halt the process.
In the event that Atlantis Marine Power Ltd is acquired by or merged with a third party entity, we reserve the right, in any of these circumstances, to transfer or assign the information we have collected from our users as part of such merger, acquisition, sale, or other change of control. In the event of our bankruptcy, insolvency, reorganisation, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors' rights generally, we may not be able to control how your personal information is treated, transferred, or used.
For any issues or questions regarding the statement above, please send an email to 'sales@atlantismarine.com'. Atlantis Marine Power Ltd is a registered company in England and Wales. Company registration No. 2015389. Company registered address: Western Wood Way, Langage Science Park, Plympton, Plymouth UK PL7 5BG.


In the winter of 2006, the CRP department received visiting researcher Flavio Malta from Brazil. He presents us with an overview of one of the most challenging planning problems faced by Brazilian cities: the exploding housing demand for the poor and the conflicts that it generates. Through the case of São Sebastião municipality, in São Paulo, he discusses some of the issues he deals with in his job as a city planner: the control of illegal settlements and the production of low income housing in a city which depends on tourism development and is located in an environmentally protected coastal zone.
Malta, Flavio (2006) "Low Income Housing in Brazil: The Case of Sao Sebastiao," Focus: Vol. 3: Iss. 1, Article 8.


text:
SHRINKING RETURNS
The emerging counseling industry in China has attracted a large number of followers but many find that becoming a qualified psychotherapist is an endless and expensive journey
By NewsChina Updated Jun.1
Counselors hug each other to enhance mutual trust among participants
Xiao Li, an intern counsellor in Beijing Jiandan Psychological Consulting, an online platform providing counseling services, sees an average of four clients per week. At the same time, she told NewsChina that she has to spend two or three days a week and pay more than she actually earns for the mandatory supervision process so she can be a fully accredited counselor.
In 2017, experiencing a midlife crisis, Xiao realized she wanted a new direction in life, so she decided to retrain as a psychotherapist.
Xiao's story reflects the experiences of many new psychotherapists in China. Over the past decade, the counseling industry has developed quickly due to a surge in demand for therapy.
Initially, many people approach therapy either as clients or out of personal interest. But the desire to become a counselor has seen many become addicted to training courses, which may not be recognized as a professional qualification due to the lack of a standardizing body in what is a relatively new field in the Chinese mainland.
High Cost
Xiao Li had been interested in a psychology-related career for a long time, although she did not study it at university. After the national psychological counselor qualification examination was launched in 2002, she passed the exam and obtained a level-three (highest is level two, lowest is level four) counseling certificate in 2007.
The rapid development of the mobile internet and social media fostered the growth of counseling in China. Huang Weiqiang, who studied psychology, founded Yi Psychological Counseling, an online platform. According to Huang, the platform has around 25 million users, with nearly 100,000 people having participated in training courses. Total revenue from a popular online course can reach 4 million yuan (US$610,000).
In 2015, as social media platforms such as WeChat took off, Xiao saw that the counseling industry was becoming more popular. As online training courses multiplied, she predicted a boom.
Even so, when she decided to become a counselor, she found gaps in her knowledge. In her three years on the platform, she took at least 10 courses, each costing from 1,000 to 2,000 yuan (US$152-305). She attended offline courses and workshops, like those offered by psychology Professor Zhu Jianjun of Beijing Forestry University, which run to 5,000 yuan (US$762) a year.
Still she found her knowledge was lacking. She knew a lot of theory but not how to perform proper consultations. In 2017, she spent another 30,000 yuan (US$4,572) on a two-year program from Jiandan Psychology. Xiao told the reporter the program is comprehensive, and after completing it many of her classmates practiced methods from different schools of psychotherapy.
But Xiao still felt it was not enough. She explained that the psychoanalytic school initially founded by Sigmund Freud has since developed into many sub-branches, so if she wants to specialize, it would take two more years to sharpen her skills. In the past three years, she has spent at least 80,000 yuan (US$12,192) on counseling training.
Generally in China, there are two main motivations to pursue psychological counseling: interest or to resolve personal issues. Many people become "trapped" in the learning process, taking more and more courses in their desire to become a psychological counselor.
According to a survey conducted among more than 1,200 counselors across the country, women account for nearly 79 percent of trainees, and nearly 76 percent are in their 30s or 40s, mostly living in economically developed cities such as Beijing, Shanghai, Guangzhou and Shenzhen.
Like Xiao Li, many have invested huge amounts of time and money in training programs. Liu Qian, a would-be counselor who studies with Yi Psychological Counseling, has spent around 80,000 yuan (US$12,192).
According to self-reported data from the Jiandan Psychology platform, more than 50 percent of beginners have backgrounds in finance, internet or education, and nearly 50 percent have graduate degrees. Liu told the reporter that a classmate had spent over 200,000 yuan (US$30,480).
The longer they study, the more psychotherapists spend on the study programs, which are forever offering upgrades and options. According to data from Yi Psychological Counseling, with a consultation experience of less than 100 hours, the average cost of training is around 46,000 yuan (US$7,010). With consultation experience ranging from 100 to 500 hours, the average cost is 84,000 yuan (US$12,802). With consultation experience of over 5,000 hours, the cost could soar to 240,000 yuan (US$36,576).
Li Songwei, a well-known psychotherapist in China with a doctorate in psychology from Peking University, told NewsChina that he has seen many therapists study for a decade or more before they start practicing.
Who Is the Patient?
In June 2019, Liu Qian spent 9,000 yuan (US$1,372) studying hypnosis at a Shanghai-based psychology education organization, and another 4,000 yuan (US$610) on courses on marriage and family counseling. After her coursework was finished, Liu qualified for a Certification of Hypnosis issued by the American Hypnosis Association and a Certificate of Marriage and Family Counselling Instructor issued by the Popular Science Committee of the Chinese Psychological Society. But she still paid US$152 and a couple of hundred yuan for the two certificates.
Nearly 100 different counseling and therapy certificates have emerged over the past three years. Some 30,000 people annually sit the basic training qualification exams from the Institute of Psychology, Chinese Academy of Sciences. More than 300 exam prep organizations are already listed and over 1,000 more are on the wait list for eligibility. But Lin Chun, vice chairman of the Working Committee of Psychological Counselor of the Chinese Psychological Society, told NewsChina that the course is not much more than "an introductory module to popularize mental health awareness."
The Committee of Standards and Research Services of the Chinese Psychological Society organizes counseling certification exams, but as a secondary body the committee is not qualified to issue certificates.
Another practical concern for Liu Qian is her eligibility to register as a counselor on the platform after completing her training courses.
"If you want to register as a counselor with a quality platform, you'd better be a student with it first. Training classes can make up what you might need as a counselor," Xiao said. For this reason, Xiao registered for a two-year comprehensive course with Jiandan Psychology. A respected platform in the industry, Jiandan Psychology's two-year course includes an internship program. Xiao must log 20 hours of case consultation before she can be promoted to internship counselor and be eligible to list on the platform.
The amount of consultation hours is not only an important threshold for joining the platform, but also a key indicator for promotions within the counseling system. According to Jian Lili, founder of Jiandan Psychology, billable consultation hours should not be a decisive criterion, but because of the lack of an authoritative and fair evaluation system, the organization has to fall back on this. Some mandatory requirements highlighted by Jian include over two years of systematic training and a minimum 400 hours of paid consulting experience.
Liu Qian spent nearly 20,000 yuan (US$3,048) for an advanced counseling course on Yi Psychology. After she finished, she registered as a consultant-in-training on the platform and started to offer cheap services at 99 yuan (US$15) for 10 sessions lasting 50 minutes to an hour. She feels that accumulating experience in counseling matters, and more importantly, joining the platform has given her a sense of belonging.
In Li Songwei's opinion, a counseling platform gains industry influence as it attracts more would-be therapists. Over the past few years, the pool of new therapists has grown, which has attracted more organizations that muddy the industry and lower standards.
An anonymous expert from the Chinese Mental Health Association told NewsChina that some top trainers who are not qualified counselors can make hundreds of thousands or even millions of yuan from training programs that only last a few days. "Training organizations boast that the market is lucrative so they attract more followers," said the source: "But in reality, only the organizations and trainers make a real profit."
Lin Fang, a counselor with five year's professional experience, told the reporter that "the driving momentum of the industry development is weird," – in other words, it is making money not from counseling, but from the pockets of new counselors.
A group meditation event in Shenzhen, September 21, 2018
'Endless Road'
Liu Qian now participates in three supervised sessions a week, two group and one personal. Personal supervision is one-on-one, where a supervisor advises a counselor by reviewing notes from sessions. Group supervision is where a supervisor guides a team of some 10 counselors to discuss and analyze cases.
The seemingly authoritative supervision process works like an apprenticeship, Li Songwei said. Usually, after a year, the counselor can practice independently. When taking on difficult cases, counselors can seek additional help from supervisors.
Qiao Zhihong, secretary of the psychology department of Beijing Normal University, told NewsChina that in the US, those with doctorates in psychology must work full time for one or two years under supervision of an advisor before qualifying to sit an exam for a psychotherapist's license.
Previously there were no requirements or rules as the industry was so new in China, but now supervision is mandatory for almost all organizations. Jiandan Psychology, which started in 2014, now requires counselors registered with the platform to undergo regular one-onone reviews. Jian Lili said higher levels of counselors require more logged supervised hours. Xiao Li's supervision began after becoming an intern at Jiandan Psychology in July 2019. Xiao charges clients 150 yuan (US$23) per session, but pays about 500 yuan (US$76) for a one-on-one review. So far, she has conducted 20 hours of consultations, meaning she has to pay 7,000 yuan (US$1,066) out of pocket rather than making any money from her work.
To graduate to novice counselor, Xiao must complete 400 consultation hours. The internship platform requires a review session once every four consultations, meaning she has to spend 40,000 yuan (US$6,096) for 100 reviews. "I'm against the requirement that everyone has to be supervised for a few years before becoming eligible to provide consultations," said Li Songwei, who inferred that the platforms are just using these conditions as another means to make money from would-be counselors. "First, you have to figure out what the purpose of the supervision work is," he said.
Li said after he started working as a therapist, he asked for assistance with two difficult cases. Li favors a peer review model. He has a fourmember peer review team, which he believes is more cost-effective.
The expert from the China Mental Health Association who asked for anonymity added that there is a shortage of experts with supervision capability in China.
According to statistics from Yi Psychology, counselors with under 500 hours of consulting experience make less than 50,000 yuan (US$7,620) per year, while those with over 5,000 hours can make over 300,000 yuan (US$45,720) annually. Most start breaking even after 500-1,000 hours of consulting.
Liu Qian does not plan to make a living as a psychotherapist in the next two years, as she plans to finish the long reading list assigned by her supervisor. "If you go into counseling, you'll find that you're on an endless road. You have to keep on with the process of self-discovery and read more books," Liu said. "At least so far I am happy with the process."
Liu Qian said her son often asks her when her coursework will end. But she enjoys the learning process. "I don't think I'm normal, but many people in this profession are like me," she said.
1. Solution of Last Resort
2. SHRINKING RETURNS
3. Xiamen University Turns 100
A MATTER OF ANTITRUST
PENALTIES OF INVESTMENT
Oct.1
TRUNK ROUTE

redpajama_set_name: RedPajamaCommonCrawl


The day after Christmas we packed up the Tahoe and headed to Memphis. Upon leaving the house Colt and I realized very quickly how icy/snowy it was and became a tad concerned about driving conditions. I honestly can''t believe the interstates were not shut down. Anyway, a few hours later we all landed in Memphis and had a fabulous lunch cooked by Bev and a visit from Grandma Kelley (aka - Great Grandma Kelley for Colt). Grandma kept us all entertained, as she was very intrigued by Colt and as to why everyone was giving her presents when "she hadn''t done a thing".
The highlight of the trip were the home-made cards Dad had made to enclose our Christmas gifts. They were hilarious, as always. I will try to take a picture of mine and post it......lets just say it included a picture of my Dad and Colt in a bar, both wearing gradation caps and a caption that read "Colt, let me tell you about College." Colt also got some really fun books, including one (The Night Before Christmas) read and recorded by my Dad which I thought was really cool. We had a great visit. Click above for a glimpse into our trip!!


text:
Galaxy Z Flip Hands-on: the most attractive Samsung flip is almost ready [Video]
Fold could be the next big thing in smartphones, but the first generation of devices has not worked properly so far. Today in Samsung unpacked, the Galaxy Z Flip is the star of the show with its flip phone design. There are a lot of people on board with the idea of doubling phones, but I think there are still some things that make it not ready for everyone.
For a quick summary Galaxy Z Flip, Samsung's second fold is very different from the first. Where Galaxy Fold is a cell phone that expanded into a tablet, Z Flip is a cell phone that condenses into… smaller.
For "strong users", this may not be useful. Z Flip doesn't give you more screen space. In fact, it even presents a barrier to not opening up to do anything. Instead, the Z Flip feels like it's focused on compacting the size of a modern smartphone with a smaller big screen.
Than Galaxy Z Flip opens to show 6.7-inch screen.This is taller than the average smartphone, but doesn't seem like a burden. However, the most important thing to know about this cell phone is not to use the same screen as Galaxy Fold. When the device uses a plastic coating, Z Flip changes to ultra-thin glass. Not only is it more resistant to damage, but it also feels better to use it.
Another endurance upgrade made by Samsung on the Z Flip is the "fiber protector" on the hinge. The very small layer is designed to keep dirt and dust out of the hinge, hoping to extend the life of the device. This really shows where Samsung learned from the problem. Fold confronted, because dust repeatedly proved to be a problem.
Google Pixel 5a brings greater battery and water resistance
(embed) https://www.youtube.com/watch?v=XK52bHy9q5s (/ embed)
Than Galaxy Z Flip, not like Fold, it really does not exceed the limits of typical smartphone specifications. Than Fold maximum of everything you can do, but Flip is pretty conservative. It has 8GB of RAM, Snapdragon 855+, and 256GB of storage. The screen is also only 60Hz. Still, the Z Flip feels very strong in a few minutes, I can give it a try.
As for Flip's exterior, I think there are pros and cons. The end result of "Mirror Purple" and "Mirror Gold" is beautiful, but their fingerprint magnets are crazy. Samsung representatives near me when I use the device have to clean the outside easily a dozen times for 25 minutes or more. This will be very annoying in daily use. Secondly, I think the outward appearance is of no use. Too small to use for anything outside of time, even notifications are interrupted.
In the end, this is what I think Galaxy Z Flip. This cell phone, more than that Galaxy Fold That is, laying the groundwork for folding smartphones that consumers may want to buy. I don't think this form factor is completely successful, but smart design options like ultra-thin glass and "fiber protectors" really excite me to see what happens next.
FTC: We use an automatic income membership link. Plus.
See Google 9to5 in YouTube for more news:
(embed) https://www.youtube.com/watch?v=iYya-S83sHI (/ embed)
performance improvements up to 23%
Ubiquiti's Amplifi Teleport app lets you explore anywhere as if you were …
YouTube Parental control: manage your child's content experience
ASRock announces its Radeon RX 5600 XT Challenger Pro 6G OC
Starfield, game by Bethesda, will have a cast with 300 actors and 150 thousand dialogues
Zelda: Breath of the Wild will receive 'DLC' made by fans
Yes, PO had its army of trolls, but the PiS flew after the band


text:
Computing With Light
It's Time For The U.S. To Let 5G In The C-Band Take Off
Jun 8, 2020, 12:25am EDT |
5 Predictions For Wearable Technology: From Fitness Trackers To "Humans 2.0"
Bernard Marr
Even if, like me, you've had a fitness tracker or smartwatch for years, you might still be surprised at how well the wearable technology or "wearables" trend has taken off. What started with Fitbit and the like has now mushroomed into an entire industry of wearables that are designed to help us lead healthier, more efficient lives.
But the revolution won't stop there. I predict that the demand for wearables will evolve into a more seamless blending of humans and technology – giving rise to "augmented humans" or "humans 2.0". Is that really where we're headed as a species? To answer that question, I look at five eye-opening predictions for the future of wearable technology.
Examples of wearables from the here and now
Fitness trackers may be one of the most recognizable examples of wearables, but let's take a quick look at some other examples:
· Smartwatches – the Apple Watch and other smartwatches are designed to generally make our lives easier and to monitor our health and activity so that we can make better lifestyle choices. In fact, the quality of health data gathered by these smartwatches is so good; the Apple Watch can reportedly add two years to your life.
· Smart clothing – the term wearable doesn't just apply to something you strap onto your wrist; it can also extend to intelligent clothing. Take Neviano smart swimsuits as an example. These include a waterproof UV sensor that communicates with your smartphone to tell you when UV levels are high, meaning you should slap on some more sunscreen.
The 5 Biggest Technology Trends In 2022
'Enthusiastic Entrepreneurs': Pre-IPO Statements On Profitability Prove To Be Larger Than Real Life
The 7 Biggest Artificial Intelligence (AI) Trends In 2022
· Smart glasses – fancy some smart sunglasses to go with your smart beachwear? You're in luck. Snapchat Spectacles 2.0 come with a built-in camera that allow you to snap photos and videos directly from your glasses. The glasses link to a smartphone, so you can share your photos and videos via the Snapchat app. Of course, whether your fellow beach-goers will welcome the idea of you effectively wearing a camera on your face is another matter…
Let's look at my top five predictions for how the wearables trend will evolve in the future.
Exoskeletons will transform industry
Exoskeletons – effectively, robotic suits that humans wear – already exist. They're used by some manufacturers to help human workers perform better (for example, lift heavier weights without injury). Hyundai Motor Group has been testing its Hyundai Vest Exoskeleton, which helps to reduce pressure on workers' necks and backs, in the factory setting. Hyundai says the exoskeletons help to reduce injuries in the workplace and increase worker efficiency. My prediction is exoskeletons like this will become the norm in manufacturing and industrial settings around the world.
Prosthetics will become more intelligent
Wearable technology also encompasses the new wave of prosthetics and robotic limbs currently being developed. These are increasingly being kitted out with technology that enables the limb to become more intuitive – for example, by responding to the nervous system or brain signals. MIT's Media Lab is involved in a research project that combines special amputation surgery with intuitive prosthetic development. Special robot prosthetics are being designed for ten volunteers, and the hope is the volunteers will be able to operate their prosthetics via the nervous system. In the future, intelligent prosthetics like this, which respond to the individual's commands more intuitively, may become the norm.
Labs will be 3D printing human tissue
If we can create replacement limbs, why shouldn't we create replacement organs? Researchers are already working towards this goal. In one example, a team at Rice University in Houston claims to have made a significant breakthrough in the bioprinting of viable human tissue, giving hope that it will be possible to print fully working replacement organs in the future. This, combined with advances in robotics and prosthetics, could revolutionize the world of medicine. So, if I need a heart transplant in the future, it's feasible that I could be given a choice between a robotic heart or a lab-grown heart.
Say hello to AI for the human brain
Companies like Facebook are racing to develop brain-computer interfaces that could, in theory, allow you to type your Facebook status update using only your mind (telepathic typing, to use the vaguely creepy technical term). Elsewhere, Elon Musk's Neuralink company is working on a brain-computer interface that would help people with severe brain injuries. Announcing the plans in 2019, Musk predicted a future in which humans could have the option of "merging with AI."
All this could have serious implications for data privacy
Wearable technology already creates a huge amount of data on the wearer, so it stands to reason that the more we embrace wearables, the more data will be available about us. Of course, this begs the question of whether we should want companies like Facebook to know more about us than they already do. Even if we're okay with that (and many of us aren't), we'll all need to become much savvier about the data we're forking over to the purveyors of wearable solutions. And the companies offering these solutions will need to make genuine strides in how seriously they take data privacy.
Wearable technology is just one of 25 technology trends that I believe will transform our society. Read more about these key trends – including plenty of real-world examples – in my new book, Tech Trends in Practice: The 25 Technologies That Are Driving The 4th Industrial Revolution.
Follow me on Twitter or LinkedIn. Check out my website or some of my other work here.


text:
Меган, војвоткиња од Сасекса (; Лос Анђелес, 4. август 1981) је америчка глумица рођена као Рејчел Меган Маркл (). Бави се и хуманитарним радом, а 19. маја 2018. године постала је део краљевске породице венчањем за принца Харија. Одрасла је у Лос Анђелесу, (Калифорнија) и након дипломирања на Северозападном универзитету, са дипломом из позоришта и међународних студија 2003. године, играла је мале улоге у неколико америчких телевизијских серија.

Од 2011. до 2018. играла је седам сезона улогу Рејчел Зејн у серији Одела. Прославила се филмовима Запамти ме и Ужасни шефови. 2017. године се верила за принца Харија и најавила је да се повлачи из глуме али да ће наставити да се озбиљније бави хуманитарним радом.

Пар се венчао 19. маја 2018. године, те је тиме Меган постала војвоткиња од Сасекса.

Младост
Рејчел Меган Маркл () је рођена 4. августа 1981. године у Лос Анђелесу, Калифорнија. Њена мајка, Дорија Регланд је социјални радник и инструктор јоге. Родитељи су јој се развели када је имала 6 година. Отац живи у Мексику, а мајка у Калифорнији. Има старијег полубрата Томаса Маркл и полусестру Самантс Грант, по оцу. Описујући њено порекло, Меган каже: "Мој тата је белац и моја мама је Афроамериканка, пола сам црна и пола бијела ... дошла сам да прихватим то и кажем ко сам ја, да подијелим са вама одакле сам, да изразим свој понос у томе што сам јака, самопоуздана жена мјешовите расе. Њена мајка потиче од Афроамериканаца поријеклом из Џорџије, а очево поријекло потиче од енглеских, холандских и ирских насељеника.

Образовање
Меган је одрасла у Холивуду и образовала се у приватним школама. Маркл је похађала Haert High School, свечану католичку приватну школу у Лос Анђелесу, мада се изјашњава као протестант. Маркл је дипломирала 2003. године на Северозападном универзитету, где је стекла двоструку диплому за позориште и међународне студије. Маркл је 2013. године за Вог рекла како је у својој 20. години, наводно, остала без бодова за завршетак године студија, и да се успјешно пријавила за стажирање у америчкој амбасади у Буенос Ајресу, Аргентина.

Каријера
Маркл је радила као слободни калиограф да би напредовала у самим почецима глумачке каријере.

Њено прво појављивање на екрану било је у позадини епизоде дневне сапунице Општа болница. У раној каријери, Маркл је имала мале гостујуће улоге на телевизијским емисијама као што су "Средњи град" (2004), "Рат у кући" (2006) и "CSI:NY" (2006). Такође је преузела неколико уговора који су деловали и моделовали послове који су укључивали неку врсту "актовке" у америчком шоу "Договор или Без Договора".

Појавила се у Фоксовој серији "Крај" као млади агент Ами Џесуп у прве двије епизоде друге сезоне.

Маркл је имала неке потешкоће у раној каријери. У 2015. години написала је: "Нисам била довољно црна за црне улоге и нисам била довољно бела за белце, оставивши ме негде у средини као етничког камелеона који није могао да резервише посао."
Од јула 2011, Маркл је играла Рејчел Зејн у америчком шоу, који је снимљен у Торонту, Онтарио. Њен карактер почиње као паралелан и на крају постаје адвокат. Она је комплетирала своја рад у седмој сезони серије "Одела" крајем 2017. године. Меган се појавила у два филма крајем 2010. године, "Води га у Грчку", "Запамти ме" и на крају 2011. године, у филму "Ужасни шефови". Од 2014. до 2017. Маркле је био оснивач и главни уредник веб сајта "Тиг". Име је извела од назива црвеног вина Tignanello. Неке од жена које су биле профилисане у овој колумни су Џесика Алба, Гаил Симонс, Ела Вудвард, Дафне Оз, Елизабет Хурлеј, Лорен Буш Лорен, Иванка Трамп, Дана Агрон и Џесика Стам. У априлу 2017. затворила је Тиг.
У новембру 2016. године Маркл и канадска компанија за одећу Рејтманс објавили су линију женских модних радионица. Током интервјуа, Маркл је рекла да се неће вратити у Одела и да ће, након свог брака, завршити са радом као глумица.

Приватни живот
Маркл је започела љубавну везу са глумцем и продуцентом Тревором Енгелсоном 2004. године. Они су се венчали у Очо Риосу, Јамајка, 10. септембра 2011. године. Развели су се у августу 2013. године.

Од јуна 2016. године, у вези је са принцем Харијем, који је шести у складу с британским престолом. Принц Хари и Маркл су се упознали на слепом састанку који је организовао њихов заједнички пријатељ. Новине су почеле да извештавају о њиховом односу у октобру 2016. 8. новембра 2016. секретар за комуникације британске краљевске породице објавио је званичну изјаву која се гласила "талас злостављања и узнемиравања" усмерених према Меган. У саопштењу се говорило о сексизму, расизму и клеветничким причама упереним у Маркл, укључујући неодређено "мрље на насловној страни националних новина". Позвали су штампу да "паузира" пре лансирања ових прича. Током интервјуа у септембру 2017. године, Маркл је први пут говорила о њеној љубави према принцу Харију, рекавши: "Ми смо двоје људи који су заиста срећни и заљубљени. Шест месеци смо били заједно пре него што се то пласирало у јавност, ја сам радила сво то време и једино што се променило је људска перцепција."
Касније тог мјесеца, први пут су се појавили заједно на званичном краљевском ангажману у Торонту. Маркл је живела у изнајмљеној кући у Торонту током своје улоге у Оделу, која је снимљена у том граду. Одселила се крајем новембра 2017. године, након што су завршени радови на седмој сезони. У јануару 2018. Маркл је обрисала своје профиле на друштвеним мрежама, а у изјави коју је дала захвалила се "свима који су пратили њене профиле на друштвеним мрежама током свих ових година".

Веридба за принца Харија

Њихова веридба објављена је 27. новембра 2017. године. До тада, неколико пута је срела краљицу Елизабету II. Саопштење веридбе подстакло је много коментара о могућем друштвеном значају (или непомичности) Меган када постане члан краљевске породице. Прстен који је добила од принца Харија састоји се од великог централног дијаманта из Боцване и од два мања дијаманта из колекције своје мајке, принцезе Дијане. Прво званично јавно појављивање Меган са принцем Харијем након њихове веридбе био је обилазак у Нотингему 1. децембра 2017. Догађај је наведен у Судском циклусу, не помињући Меганино присуство. Пар је позван да прослави Божић 2017. године са краљевском породицом на имању краљице Сандрингхам.

У јануару 2018. Маркл се придружила принцу Харију у посети базе Репрезент ФМ станице у Бриктону. Поново, Судски Цирклус је овај догађај обрадио као соло ангажман "Принца Харија од Велса". Маркл је такође пратила принца у Кардифу, где су упознали младе људе који су били укључени у добротворну организацију "Уличне игре". 1. фебруара 2018. Маркл је пратила принца Харија на презентацији награде Ендеавор Фунд војним херојима у Хали Голдсмитса.
Маркл је 13. фебруара пратила принца Харија у Единбургу. Током посете главном граду Шкотске, пар је упознао мноштво људи који су се окупили на Еспланади испред дворца у Единбургу да би видели чувени "One O'Clock Gun"; такође су посетили кафе "Друштвени залогај" - предузеће које запошљава бескућнике.

28. фебруара 2018. године, Маркл је имала први заједнички званични ангажман с принцем Харијем и војводом и војвоткињом из Кембриџа на првом годишњем форуму Краљевске фондације "Направи разлику заједно". Очекује се да Маркл постане четврти покровитељ, заједно са Харијем, Вилијем и Катарином, након њеног брака у краљевској породици.
Било је пријављено у неколико случајева да је Маркл направила најмање две приватне (у то време "тајне") посјете Центру за културну баштину Муслимана Ал Манаар, где је речено да је тешила преживеле после Гренфел Товер пожара у јуну 2017. Била је у пратњи службеника за обезбеђење и личног помоћника из Краљевског дома. Маркл и принц Хари обележили су Међународни дан жена присуствујући догађају у Бирмингему, у чијем је саставу група која подстиче девојке у напредовању у науци и технологији. Пар је први пут посетио Сјеверну Ирску 23. марта 2018. године.
Маркл је крштена и потврђена у Енглеској цркви 6. марта 2018. Приватна церемонија одржана је у Краљевској капели палате Сент Џејмс, а надбискуп Кентерберија, Џастин Велби, користио је воду из реке Јордана како би крстио Меган у англиканској цркви.
Вјенчање ће се одржати 19. маја 2018. године у Ст Георгеовој капели у Виндзорском замку. Након вјеридбе, Маркл је започела дугогодишњи процес постајања британског грађанина. Према неким изворима, она ће задржати и америчко држављанство, али Кенсингтон Палата је крајем новембра 2017. године назначила да одлука још није донета. После венчања, они ће живети у Нотингем Котиџу у Лондону, на темељу Кенсингтон палате.

Хуманитарни рад

Маркл је била савјетник међународне хуманитарне организације "Један млади свет", на годишњем самиту у Даблину 2014. године о темама родне равноправности и модерног ропства. Такође, у 2014. години путовала је у Авганистан и Шпанију у склопу председавајућег УСО-а. У 2016. години, Меган је постала глобални амбасадор Светске визије.

Када је путовала за кампању за чисту воду, кампању агенције за пружање сигурне и чисте воде за пиће, отпутовала је у Индију како би подигла свијест о питањима жена. Она је такође радила са ентитетом Уједињених нација за родну равноправност и оснаживање жена као адвоката. Она се идентификује као феминисткиња. Маркл је поново присуствовала Самиту младих светова 2016. године.

Филмографија

Галерија

Референце

Спољашње везе

 Меган Маркл – рађање принцезе "воук" царства

Рођени 1981.
Америчке глумице
Биографије живих особа
Амерички телевизијски глумци
Феминисткиње
Династија Виндзор

redpajama_set_name: RedPajamaWikipedia