Document:

(12)United
States Patent

 Giguiere
et al.

  

  

(54)DISTANCE-MODIFIED
SECURITY AND CONTENT SHARING 

 

(71)Applicants:Gannon
K. Giguiere, Newport Beach,

  CA
(US); Alan L. Johnson, Newport

  Beach,
CA (US); Timothy J. Lyons,

  Tustin,
CA (US)

   

(72)Inventors:Gannon
K. Giguiere, Newport Beach,

  CA
(US); Alan L. Johnson, Newport

  Beach,
CA (US); Timothy J. Lyons,

  Tustin,
CA (US)

   

(73)Assignee:Eventure
Interactive, Inc., Costa Mesa,

  CA
(US)

   

(*)Notice:  Subject
to any disclaimer, the term of this patent is extended or adjusted under 35 U.S.C. 154(b) by 0 days.

   

(21)Appl. No.:14/068,957

   

(22)Filed:  Oct.
31, 2013

   

(51)Int. Cl.

 H04L
9/00(2006.01)

 H04L
9/32(2006.01)

   

(52)U.S. Cl. 

 USPC726/1;
726/2; 726/3; 726/4; 

   

(58)Field
of Classification Search

 CPCH04L
63/20; H04L 63/10; H04L 63/101; 

  G06F
21/10; G06F 2221/2141 

 USPC726/1-4,
26-30; 713/165-167,193; 

  709/223-225,
229 

    

 See
application file for complete search history.

 

(56)References
Cited 

 

U.S.
PATENT DOCUMENTS

 

 7,359,930
 B2*4/2008 Jackson et al.709/200

 7,613,426
 B211/2009 Kuehnel 

 7,907,934
 B23/2011 Naghian 

 7,974,574
 B27/2011 Shen 

 

	(10)	Patent
    No.:	US
    8,769,610 B1
	(45)	Date of Patent:	Jul.
    1, 2014

 

	 	8,135,835	 	B2	3/2012	 	Wilbrink	 
	 	8,149,697	 	B2	4/2014	 	Parkkinen	 
	 	8,156,337	 	B2*	4/2012	 	Balfanz et al.	713/169
	 	8,181,257	 	B2*	5/2012	 	Chalasani et al.	726/26
	 	8,411,562	 	B2*	4/2013	 	Chia et al.	370/230
	 	8,478,300	 	B2	7/2013	 	Kuehnel	 
	 	8,520,979	 	B2	8/2013	 	Conwell	 
	 	2007/0250482	 	A1	10/2007	 	Yao	 
	 	2012/0084364	 	A1	4/2012	 	Sivavakeesar	 

 

(Continued)

 

FOREIGN
PATENT DOCUMENTS

 

WO2004107681A112/2004

WO2005018142A12/2005

WO2012006446A11/2012

 

OTHER
PUBLICATIONS

 

Bhargava,
Bharat K, et al; A Trust-based Approach for Secure Data Dissemination in a Mobile Peer-to-Peer Network, of AVs; International
Journal of Next-Generation Computing, vol. 3, No. 1, Mar. 2012.

 

(Continued)

 

Primary Examiner
— Hosuk Song

 

(74) Attorney,
Agent, or Firm — Fish & Tsang LLP

 

	(57)	ABSTRACT	 

 

In
one aspect of the invention, a system for sharing resources in an ad-hoc peer-to-peer network is presented. The ad-hoc peer-to-peer
network includes a host device that is associated with a resource. A Security application of the host device allows the user of
the host device to share the resource with other devices in the network. The security application also allows the user to establish
access policies for certain known devices within the network. An access policy established for a known device specifies what respect
to accessing the resource. The access policy has the characteristics of inheritance. Thus, when a device requests to access the
resource, the security application of the host device determines an access policy of the device based on access policies of one
or more of the known devices.

 

15
Claims, 3 Drawing Sheets

    	 

    	 

    

 

US
8,769,610 B1

Page
2

 

References
Cited

 

U.S.
PATENT DOCUMENTS

 

2013/0054643 A12/2013Yao

2013/0160076 A16/2013Morita

2013/0219285 A18/2013Iwasaki

 

OTHER
PUBLICATIONS

 

Helal,
Sumi, et al; Konark—A Service Discovery and Delivery Protocol for Ad-Hoc Networks; Computer and Information Science and
Engineering Department, University of Florida, Gainesvile, Florida, 2010.

 

Desai,
Nitin, et al; Infrastructure for Peer-to-Peer Applications in Ad-Hoc Networks; konark_p2p.pdf; Computer and Information Science
and Engineering Department; University of Florida; May 17, 2006; retrieved from wayback machine on Mar. 20, 2014; web.archive.org/web/20060401000000*./http://www.icta.ufl.edu/projects/publications/konark_p2p.pdf.

 

Castro,
Marcel C., et al; Peer-to-Peer Overlay in Mobile Ad-hoc Networks; Handbook_,P2P_09.pdf; Work supported by the European Commission
in the framework of the FP7 Network of Excellence in Wireless COMmunications NEWCOM++ (contract No. 216715); Jan. 12, 2011; retrieved
from wayback machine on Mar. 21, 2014, http://web.archive.org/web./*/http://social2.googlecode.com/files/Handbook_P2P_09.pdf.

 

Sbai,
Mohamed, et al., Revisiting P2P content sharing in wireless ad hoc networks; iwsos.pdf; EPI Planete, Inria, France, Nov. 7, 2011;
retrieved from wayback machine on Mar. 21, 2011; http://web.archive.org/web/*/http://planete.inria.fr/bithoc/Dependencies/iwsos.pdf.

 

Gligor,
Virgil D.; Security of Emergent Properties in Ad-Hoc Networks; cambridge04.pdf; University of Maryland, Electrical and Computer
Engineering Department, College Park, Maryland; May 3, 2006, retrieved from wayback machine on Mar. 21, 2014; http://web.archive.org/web/20060401000000*/http://www.ece.umd.edu/~gligor/cambridge04.pdf.

 

* cited
by examiner

    	 

    	 

    

 

U.S. PatentJul.
1, 2014Sheet 1 of 3US 8,769,610 B1

 

    	 

    	 

    

 

U.S. PatentJul.
1, 2014Sheet 2 of 3US 8,769,610 B1

    	 

    	 

    

 

U.S. PatentJul.
1, 2014Sheet 3 of 3US 8,769,610 B1

    	 

    	 

    

 

US
8,769,610 B1

 

DISTANCE-MODIFIED
SECURITY AND CONTENT SHARING

 

FIELD
OF THE INVENTION

 

The
field of the invention is network access security, particularly, access security in an ad-hoc peer-to-peer network.

 

BACKGROUND

 

The
following description includes information that may be useful in understanding the present invention. It is not an admission that
any of the information provided herein is prior art or relevant to the presently claimed invention, or that any publication specifically
or implicitly referenced is prior art.

 

Advances
in portable devices that are capable of directly communicating with each other via short range wireless technology (e.g., direct
WiFi, Bluetooth®, infrared, etc.) allow devices to form ad-hoc peer-to-peer networks anytime and anywhere (see “Infrastructure
for Peer-to-Peer Applications in Ad-hoc Networks” by Desai et al. and U.S. Pat. No. 8,520,979 issued to Conwell entitled
“Methods and Systems for Content Processing”, filed Nov. 14, 2008). These networks are formed when two or more portable
devices are communicatively coupled to each other via short range wireless connections without depending on any pre-existing network
infrastructure such as a server, an access point, etc. Once connected to the network, a device can potentially access content
(e.g., documents, photos, videos, etc.) or resources of and/or connected to other devices (e.g., printer, camera, data storage,
etc.) on the network. Conversely, the device can also share its content or resources to the other devices connected to the network.

 

However,
these seemingly convenient peer-to-peer network architectures also raise new security issues that were not present in conventional
network architectures. For example, since a peer-to-peer network allows devices to join the network and access resources in the
network by merely connecting to any one of the devices that is part of the network, it is a challenge to devise a meaningful security
policy for all of the resources within the network.

 

Efforts
have been made in the area of providing better security to ad-hoc peer-2-peer networks. For example, the publication “A
Trust-based Approach for Secure Data Dissemination in a Mobile Peer-to-Peer Network of aerial vehicles (AVs)” by Bhargava
et al. discloses providing different access to different AVs within the network based on a trustworthiness score assigned to each
AV. The trustworthiness score for each AV is determined by a set of factors such as history of interactions with that AV, location,
distance, authentication level, etc.

 

U.S.
Pat. No. 7,907,934 issued to Naghian entitled “Method and System for Providing Security in Proximity and Ad-hoc Networks”,
filed Sep. 9, 2004, also discloses a method for providing security in a mobile ad-hoc network based on the location of the device
requesting for access.

 

U.S.
Pat. No. 8,149,697 issued to Parkkinen et al. entitled “System, Method, and Computer Program Product for Discovering Services
in a Network Device”, filed Jun. 26, 2008, discloses providing security in an ad-hoc peer-to-peer network based on degree
of separation between the owner of the resource and the device that wishes to access the resource;

 

Other
efforts that have been made in this area includes:

 

U.S.
Pat. No. 7,613,426 issued to Kuehnel et al. entitled “Proximity Service Discovery in Wireless Networks”, filed Dec.
20, 2005;

 

U.S.
Pat. No. 7,974,574 to Shen et al. entitled “Base Station Initiated Proximity Service Discovery and Connection Establishment”,
filed Jul. 25, 1007;

 

U.S.
Pat. No. 8,135,835 issued to Wilbrink et al. entitled “Hardware and Processing Request Brokerage”, filed May 12, 2005;

 

U.S.
Patent Publication 2007/0250482 to Yao et al. entitled “Method and Apparatus for Document Matching”, filed Apr. 25,
2006;

 

U.S.
Patent Publication 2012/0084364 to Sivavakeesar entitled “Scalable Secure Wireless Interaction Enabling Methods, System
and Framework”, filed Oct. 5, 2010;

 

U.S.
Patent Publication 2013/0160076 to Morita entitled “Access Authority Generation Device”, filed Feb. 26, 2013; and

 

U.S.
Patent Publication 2013/0219285 to Iwasaki entitled “Mirrored Interface Navigation of Multiple User Interfaces”, filed
Feb. 21, 2012.

 

All
publications identified herein are incorporated by reference to the same extent as if each individual publication or patent application
were specifically and individually indicated to be incorporated by reference. Where a definition or use of a term in an incorporated
reference is inconsistent or contrary to the definition of that term provided herein, the definition of that term provided herein
applies and the definition of that term in the reference does not apply.

 

In
some embodiments, the numbers expressing quantities of ingredients, properties such as concentration, reaction conditions, and
so forth, used to describe and claim certain embodiments of the invention are to be understood as being modified in some instances
by the term “about.” Accordingly, in some embodiments, the numerical parameters set forth in the written description
and attached claims are approximations that can vary depending upon the desired properties sought to be obtained by a particular
embodiment. In some embodiments, the numerical parameters should be construed in light of the number of reported significant digits
and by applying ordinary rounding techniques. Notwithstanding that the numerical ranges and parameters setting forth the broad
scope of some embodiments of the invention are approximations, the numerical values set forth in the specific examples are reported
as precisely as practicable. The numerical values presented in some embodiments of the invention may contain certain errors necessarily
resulting from the standard deviation found in their respective testing measurements.

 

Unless
the context dictates the contrary, all ranges set forth herein should be interpreted as being inclusive of their end-points and
open-ended ranges should be interpreted to include only commercially practical values. Similarly, all lists of values should be
considered as inclusive of intermediate values unless the context indicates the contrary.

 

As
used in the description herein and throughout the claims that follow, the meaning of “a,” “an,” and “the”
includes plural reference unless the context clearly dictates otherwise. Also, as used in the description herein, the meaning
of “in” includes “in” and “on” unless the context clearly dictates otherwise.

 

The
recitation of ranges of values herein is merely intended to serve as a shorthand method of referring individually to each separate
value falling within the range. Unless otherwise indicated herein, each individual value with a range is incorporated into the
specification as if it were individually recited herein. All methods described herein can be performed in any suitable order unless
otherwise indicated herein or otherwise clearly contradicted by context. The use of any and all examples, or exemplary language
(e.g. “such as”) provided with respect to certain embodiments herein is intended merely to better illuminate the invention
and does not pose a limitation on the scope of the invention otherwise claimed. No language in the specification should be construed
as indicating any non-claimed element essential to the practice of the invention.

    	 

    	 

    

 

Groupings
of alternative elements or embodiments of the invention disclosed herein are not to be construed as limitations. Each group member
can be referred to and claimed individually or in any combination with other members of the group or other elements found herein.
One or more members of a group can be included in, or deleted from, a group for reasons of convenience and/or patentability. When
any such inclusion or deletion occurs, the specification is herein deemed to contain the group as modified thus fulfilling the
written description of all Markush groups used in the appended claims.

 

The
publications listed above address only some but not all security issues in an ad-hoc peer-to-peer network. Thus, there is still
a need for providing a more secured architecture for an ad-hoc peer-to-peer network.

 

SUMMARY
OF THE INVENTION

 

Various
objects, features, aspects and advantages of the inventive subject matter will become more apparent from the following detailed
description of preferred embodiments, along with the accompanying drawing figures in which like numerals represent like components.

 

The
inventive subject matter provides systems and methods for securely managing and sharing resources within an ad-hoc peer-to-peer
network. As used herein, the term “ad- hoc peer-to-peer network” means a decentralized wireless network that allows
devices within range to discover and communicate with each other without involving a central access server (e.g., a central access
point) or a pre-existing networking infrastructure. As such, an ad-hoc peer-to-peer network can be created spontaneously. Devices
can join and leave the network as they wish seamlessly without affecting the connectivity between other devices within the network.

 

In
one aspect of the invention, a method of managing resources in such an ad-hoc peer-to-peer network is presented. The method includes
a step of establishing an ad-hoc peer-to-peer network for several devices. The devices within the ad-hoc peer-to-peer network
include mobile devices (e.g., smart phones, tablets, laptops, etc.) and/or stationary devices (e.g., smart routers). The devices
include a first device that is associated with a first resource. The first device is directly connected to a second device in
the ad-hoc peer-to-peer network. The first resource can include hardware (e.g., camera, printer, hard drive, camcorder, a vehicle,
an equipment, etc.), software (e.g., an application, a game, etc.), media content (e.g., audio data, video data, image data, etc.)
and/or documents (e.g., text documents, spreadsheets, etc.).

 

The
method also includes a step of granting the second device access to the first resource according to an access policy. The access
policy specifies a set of rights for accessing the first resource. The set of rights can include at least one of the following:
copy, write, read, contribute, and delete.

 

The
method includes a step of receiving a request for access to the first resource from a third device. The third device is indirectly
connected to the first device in the ad-hoc peer-to-peer network via the second device. In some embodiments, the access policy
granted to the second device has the characteristics of inheritance, such that other devices connected to the first device via
the second device can inherit the access policy from the second device. As such, the method also includes a step of determining
an access policy for the third device for accessing the first resource based on the access policy granted to the second device.
In some embodiments, the access policy determined for the third device can be identical to the access policy granted to the second
device. In other embodiments, the access policy determined for the third device specifies a subset of the set of rights specified
by the access policy granted to the second device.

 

The
subset of the set of rights can limit the rights quantitatively and/or qualitatively. For example, if the access policy for the
second device allows the second device to access a document, the access policy for the third device may allow the third device
to access only a portion of a document or a degraded (e.g., lower resolution, redacted, excluding metadata, etc.) version of the
document, or both. In another example, if the access policy for the second device allows the second device to access a set of
features of the resource (e.g., copy, print, scan features of a printer), the access policy determined for the third device might
include only a subset of the set of features.

 

In
addition to the second device, the third device in some embodiments is indirectly connected to the first device via a fourth device.
In some of these embodiments in which an access policy has also been granted to the fourth device, the access policy for the third
device is determined based on both access policies of the second and the fourth devices.

 

When
the access policies of the second and the fourth devices share a common set of rights, the access policy determined for the third
device can specify either that common set of rights, or a subset of that common set of rights. In an extreme example in which
the access policies of the second and the fourth devices do not share any common rights, the access policy determined for the
third device specifies no rights to access the first resource.

 

BRIEF
DESCRIPTION OF THE DRAWINGS

 

FIG.
1 illustrates an example ad-hoc peer-to-peer network.

 

FIG.
2 illustrates different software layers within a mobile device.

 

FIG.
3 illustrates an example security application of some embodiments.

 

DETAILED
DESCRIPTION

 

It
should be noted that any language directed to a computer should be read to include any suitable combination of computing devices,
including servers, interfaces, systems, databases, agents, peers, engines, modules, controllers, or other types of computing devices
operating individually or collectively. One should appreciate the computing devices comprise a processor configured to execute
software instructions stored on a tangible, non-transitory computer readable storage medium (e.g., hard drive, solid state drive,
RAM, flash, ROM, etc.). The software instructions preferably configure the computing device to provide the roles, responsibilities,
or other functionality as discussed below with respect to the disclosed apparatus. In especially preferred embodiments, the various
servers, systems, databases, or interfaces exchange data using standardized protocols or algorithms, possibly based on HTTP, HTTPS,
AES, public-private key exchanges, web service APIs, known financial transaction protocols, or other electronic information exchanging
methods. Data exchanges preferably are conducted over a packet-switched network, the Internet, LAN, WAN, VPN, or other type of
packet switched network.

    	 

    	 

    

 

The
following discussion provides many example embodiments of the inventive subject matter. Although each embodiment represents a
single combination of inventive elements, the inventive subject matter is considered to include all possible combinations of the
disclosed elements. Thus if one embodiment comprises elements A, B, and C, and a second embodiment comprises elements B and D,
then the inventive subject matter is also considered to include other remaining combinations of A, B, C, or D, even if not explicitly
disclosed.

 

As
used herein, and unless the context dictates otherwise, the term “coupled to” is intended to include both direct coupling
(in which two elements that are coupled to each other contact each other) and indirect coupling (in which at least one additional
element is located between the two elements). Therefore, the terms “coupled to” and “coupled with” are
used synonymously.

 

The
inventive subject matter provides systems and methods for securely managing and sharing resources within an ad-hoc peer-to-peer
network. As used herein, the term “ad-hoc peer-to-peer network” means a decentralized wireless network that allows
devices within range to discover and communicate with each other without involving a central access server (e.g., a central access
point) or a pre-existing networking infrastructure. As such, an ad-hoc peer-to-peer network can be created spontaneously. Devices
can join and leave the network as they wish seamlessly without affecting the connectivity between other devices within the network.

 

Range
for ad-hoc peer-to-peer networks is typically 500 feet or less, but where such networks use cellular technology or wired communication
links, the range could be any practical distance.

 

At
least one of the devices within the ad-hoc peer-to-peer network can be associated with a resource, by including a resource within
the device or is communicatively coupled with a resource. The resource can include a hardware (or sub-device) such as a printer,
a camera, a speaker, etc. The resource can also include data (e.g.. media content such as audio data and video data, text documents,
etc.). Once a device has joined the ad-hoc peer-to-peer network, the device can be configured to share the associated resource(s)
with others in the network.

 

FIG.
1 illustrates an example ad-hoc peer-to-peer network 100. The ad-hoc peer-to-peer network 100 includes several
mobile devices 105-135. These mobile devices 105-135 can include any device that is capable of establishing a direct
wireless communication with another portable device. Examples of these mobile devices include mobile phones, smart phones, tablets,
laptops, portable game consoles, etc. Although the devices that are part of the ad-hoc peer-to-peer network 100 as illustrated
include only mobile devices, it is contemplated that other stationary devices such as smart routers can be included as part of
the ad-hoc peer-to-peer network 100 as well. In fact, any of the mobile devices 105-135 shown in the ad-hoc peer-to-peer
network 100 can be replaced by a stationary device. Unlike a conventional router, a smart router is a device that can perform
functionalities other than mere forwarding and routing data, it could have processing power and memory. For example, when one
uses a smart phone as a hub (e.g., a WIFI hot spot) to send and receive cellular or WIFI signals, the smart phone in that sense
is acting as a smart router. One could also have dedicated smart routers.

 

An
ad-hoc peer-to-peer network can be formed according to any viable network topology (e.g., star topology, mesh topology, tree topology,
etc.). In some embodiments, each mobile device within the network is directly connected all of the other mobile devices in the
network such that the network follows a fully connected mesh network topology. As used herein, a direct connection between two
devices exists when a communication link is established between the two devices (without using any routing or other intervening
device). In other embodiments, at least one of the mobile devices in the network is directly connected to some, but not all. of
the other devices in the network (i.e., a partially connected mesh network). Thus, in a partially connected mesh network, a mobile
device can join and become part of an ad-hoc peer-to-peer network when it establishes a direct connection with one or more mobile
devices that are part of the ad-hoc peer-to-peer network. A mobile device within the network can have a direct connection with
as many as all other mobile devices within the network or as few as one other mobile device within the network.

 

The
ad-hoc peer-to-peer network 100 in FIG. 1 is an example of a partially connected mesh network. As shown, mobile
device 105 is directly connected to mobile devices 115 and 120, while mobile device 120 is directly
connected to mobile devices 105, 110, 125, and 130. Mobile device 110 is directly connected
to both mobile devices 120 and 125, and mobile device 125 is directly connected to both mobile devices 110
and 120. Mobile device 115 is directly connected to both mobile devices 105 and 130 while mobile
device 130 is directly connected to mobile devices 115, 120, and 135. Mobile device 135 is
only connected directly to mobile device 130.

 

Among
the mobile devices within the ad-hoc peer-to-peer network 100, mobile device 135 has the least number of direct
connections within the network 100 (i.e., one direct connection with mobile device 130) and mobile device 120
has the largest number of direct connections within the network 100 (i.e., four direct connections with mobile devices
105. 110. 125, and 130).

 

Some
of the mobile devices within the network can also be associated with sharable resources. For example, mobile device 115 can
include a built-in camera (or alternatively communicatively coupled with a camera), mobile device 125 can be communicatively
coupled with a printer, and mobile device 135 includes a data storage 155. Data storage 155 can also include
sharable data such as audio data, video data, text documents, etc.

 

Users
170. 180, and 190 of these mobile devices 115, 125, and 135 can decide to share their
resources (e.g., camera, printer, data storage, etc.) with other devices within the ad- hoc peer-to-peer network 100. However,
unlike the conventional networking infrastructure, the characteristics of an ad- hoc peer-to-peer network create challenges in
securely sharing these resources with others within the network. Some of the challenges stem from the fact that it is very difficult
or even impossible to find out which mobile device can potentially access the resource. As mentioned above, different mobile devices
can join and leave the network spontaneously. In addition, mobile devices can potentially access the resources of a host device
(i.e., a mobile device that hosts at least one resource) even if the mobile devices are not directly connected to the host device
(the mobile devices can be connected to the host device via a number of hops mobile devices via which data from the mobile device
has to pass before reaching the host device within the network).

 

In
one aspect of the invention, a system for sharing resources in an ad-hoc peer-to-peer network is presented. In some embodiments,
the system provides a security application for each of the mobile devices connected to the ad-hoc peer-to-peer network. The security
application of a host device allows the user to indicate which resource to share with other devices in the ad-hoc peer-to-peer
network and to establish access policies for the known devices within the network with respect to the shared resource. The access
policies established for the known devices can specify what features (e.g.. photos/videos capturing feature, printing feature,
data storage feature, data editing feature, etc.) and/or what data of the resource to which that the known devices has access.

    	 

    	 

    

 

Known
devices can include devices that are directly connected to the host device in the ad-hoc peer-to-peer network and other devices
that the user of the host device is aware to be part of the ad-hoc peer-to-peer network. For example, user 170 of host
device 115 (that is hosting a camera resource 145) can decide to share the camera 145 as a shared resource
with other devices within the network 100. Note that in this example any of the various mobile devices 105, 110,
115, 120, 125, 130 and 135 could act as the host device, and the host device can change over
time, as for example if the current host device 115 leaves the ad-hoc peer-to-peer network 100.

 

The
host device in the example of FIG. 1, (mobile device 115), can detect that at least devices 105 and 130
are directly connected to it. and allows the user 170 to establish access policies for devices 105 and 130.
Additionally, in this example the user 170 can establish different access policies for these two devices 105 and
130. The access policy that the user 170 establish for each of the devices 105 130 specifies a set
of rights for accessing the camera 145 by the device. The set of rights that can be included in the access policy for the
camera 145 can include capturing a photo with the camera, viewing photos captured by the camera, and even contributing
photos. In this example, the user 170 can specify that device 105 can only view photos captured by camera 145.
but that device 130 can both view photos and capture photos with camera 145. For other types of resource, the access
policy can also include other rights such as copy, write, read, contribute, and delete. In some embodiments, the user can establish
an access policy that specifies no access whatsoever to the resource. In some embodiments, the access policies that are established
for the known devices have the characteristics of inheritance, which will be explained in more detailed below.

 

Once
the user of a host device indicates to the security application that a resource associated with the host device is to be shared
with other device within the ad-hoc peer-to-peer network, the security application running on the host device is configured to
broadcast a notification of this newly shared resource with the rest of the mobile devices within the network. In this example,
the security application of mobile device 115 is configured to broadcast a notice of the newly shared camera 145
to devices 105, 110, 120, 125, 130, and 135. The security application running on the
other devices can then present the resource a shared resource to the users (e.g., users 160, 165, 180, 185,
and 190) of the other devices and allow those users to access the shared resource.

 

When
a user of a requesting device makes a request to access the shared resource via the security application running on the requesting
device, the security application prepares a request, and sends the request to the host device 115. Upon receiving the request
at the host device 115, the security application running on the host device 115 will determine an access policy
for the requesting device and will grant access to the requesting device based on the determined access policy. First, the security
application of the host device 115 determines whether the requesting device is one of the known devices for which an access
policy has been established by the user. If the requesting device is one of the known devices, the security application uses the
access policy that has already been established for the requesting device.

 

On
the other hand, if the requesting device is not one of the known devices, the security application looks at the path and all the
intermediary devices that the request has passed through from the requesting device before reaching the host device. For example,
referring back to FIG. 1, if requesting device 125 sends a request to access the camera 145 of host device
115, one of the possible paths for the request to travel to the host device 115 is to go through intermediary devices
120 and 105. For clarity, the term “upstream” will be used to describe the direction within the path
from the requesting device to the host device and the term “downstream” will be used to describe the direction within
the path from the host device to the requesting device. In the above example, the upstream direction of the path will include
devices 120 and 105. Conversely, the downstream direction of the path will include devices 105 and 120.
Additionally, the term “downstream devices” of a device within a path means all devices in the path that come after
the device in the downstream direction, the term “upstream devices” of a device within a path means all devices in
the path that come after the device in the upstream direction

 

As
mentioned above, the access policies established for known devices have the characteristics of inheritance. That is, the access
policy of a device can be inherited from access policies of other upstream devices along the path of the request. In the above
example, the access policy for mobile device 125 can be inherited from either device 105 or device 120 or
both. Since device 105 is a known device for which an access policy has been established, the security application of host
device 115 in this example will allow device 125 to inherit its access policy from device 105. Thus, the
security application of host device 115 will grant device 125 access to view photos.

 

Alternatively,
instead of inheriting the entire access policy from an upstream device, the security application can be configured to allow inheritance
of only a portion of the access policy of the upstream device. Thus, when the upstream device is granted access to a set of rights
according to its access policy, the requesting device downstream of the upstream device will get only a subset of those rights,
thereby receiving a more limited access policy than the upstream device. The inherited access policy can be more limiting in a
variety of ways, including but not limited to limiting in the types of access rights granted to the requesting device, the quantity
of data allowed to be viewed by the requesting device (e.g., a subset of documents or only a portion of each document), the quality
of the data allowed to be viewed by the requesting device, access to only a subset of features provided by the resource, etc.

 

For
example, the security application of host device 115 can be configured by the user to grant devices 120 and 125
viewing access to only a portion of the photos taken by camera 145, or viewing access to a degraded set of photos (e.g.,
lower resolution, etc.) taken by camera 145. In yet other embodiments, the security application of the host device 115
can additionally be configured by the user to provide access to any devices that are downstream of the known device 105
in a cascading fashion, such that devices that are more separated to the known device 105 (e.g., device 125)
has more limited access than devices that arc closer to the known device 105 (e.g., device 120). Thus, one of the
technical effects of this security system is that it allows user of the host device to set access levels for other devices in
the ad-hoc peer-to-peer network 100 without being aware of which devices within the network have potential access to the
associated resources.

    	 

    	 

    

 

In
some embodiments, the access policy of a requesting device can be inherited by two or more upstream devices. If the user 170
of the host device 115 has previously established access policies for both devices 105 and 120. the requesting
device 125 can inherit its access policy from the policies of both devices 105 and 120. When the two established
access policies (for devices 105 and 120) specify different sets of rights, the security application can use different
techniques to inherit different rights from these two policies. In some embodiments, the security application is configured to
inherit only the common rights from the two policies, which most likely will result in a policy that is more limited than either
of the two policies. In the most extreme case in which the access policies of devices 105 and 120 do not share any
common rights, the device 125 will inherit no rights for its access policy. In other embodiments, the security application
is configured to inherit all rights from both policies, which most likely will result in a policy that is broader than either
of the two policies.

 

In
some embodiments, instead of only looking at the path through which the request has passed to get from the requesting device and
the host device, the security application can also look at other possible paths between the requesting device and host device,
and thereby determine the access level for the requesting device based on all possible paths. An alternative path for the request
might involve a known device with a broader (or more limited) access level than the known device in the original path. For example,
instead of traveling through devices 120 and 105, the request from requesting device 125 to host device 115
can travel through devices 120 and 130 to reach host device 115.

 

The
security application can be configured to use whatever path(s) would satisfy an appropriate rules set. For example, in some embodiments
the security application could be configured in a manner that would result in the broadest access. In other embodiments the security
application could be configured in a manner that would result in a narrower, or even the narrowest access.

 

FIG.
2 illustrates the security application with respect to the different software layers within a mobile device. As shown,
an exemplary mobile device 200 includes a networking layer 215 that is responsible for managing transmitting and
receiving data via a networking hardware (e.g., an Ethernet card, a WIFI card, etc.). an operating system layer 210 that
is responsible for managing resources of the device, and a security platform layer 205 sitting on top of the operating
system layer 210. The security platform layer 205 of some embodiments is responsible for managing the security of
the mobile device 200 and all resources associated with the mobile device 200. In some embodiments, a security application
220 can be implemented within the security platform layer 205.

 

Further
in FIG. 2, the security application of the mobile device 200 is configured to manage access to the resources that
are associated with the mobile device. Specifically, the security application is configured to grant access to the associated
resource based on the origin of the request (i.e., the requesting mobile device) and how the requesting mobile device is connected
to the host device. The specific functionalities and features of the security application will be explained in more detailed below
by reference to FIG. 3.

 

FIG.
3 illustrates an example security application 220 that is implemented within the mobile device 200. The security
application 220 includes a security manager 305, a user administration interface 310 configured to interface
with a user 345 of the mobile device 200, and a network interface 315 configured to interface with mobile
devices directly connected to the mobile device 200 (e.g., mobile devices 325, 330, and 335 in this
example). The security application 220 can also be communicatively coupled with an access control list database 320
that is configured to store security data for the security application 220.

 

The
security application can be configured to manage any sharable resource that is associated with the mobile device 200. In
this example, the mobile device 200 has a built-in camera 340. The user 345 can add the camera 340
as one of the resources managed by the security application 220 via the user administration interface 310. Once
a resource is specified to be managed by the security application 220, that resource can be shared with other mobile devices
within the ad-hoc peer-to-peer network and any request to access the resource by other devices will be first directed to the security
application 220.

 

The
security application 220 allows the user 345 to configure different access levels for different known mobile devices
to access the resource. Known mobile devices can be mobile devices that are directly connected to the mobile device 200
within the ad-hoc peer-to-peer network (e.g., mobile devices 325, 330, and 335 in this example). Known mobile
devices can also be any devices that the user of mobile device 200 is aware that are part of the ad-hoc peer-to-peer network.
Thus, in some embodiments, the security manager 305 is configured to provide a user interface for the user 345 of
the mobile device 200 via the user administration interface 310 for configuring the different access levels. Through
this user interface, the user 345 can assign different access levels for different resources associated with the mobile
device 200 to different mobile devices.

 

For
example, the user 345 can give mobile devices 325 and 330 access to view all photos captured by camera 340.
The user 345 can also give mobile device 335 access to take pictures using camera 340 and view all pictures
taken by camera 340. The access information associated with each resource can be stored in the access control list database
320.

 

In
some embodiments, a security application identical to the security application 220 is installed in each of the other mobile
devices within the ad-hoc peer-to-peer network. When a resource associated with a mobile device is being shared within the ad-hoc
peer-to-peer network (i.e., when the user of the mobile device indicates that the resource is sharable within the network via
the security application), the security manager 305 is configured to send a notification to all other mobile devices within
the network about this newly sharable resource. In some embodiments, the notification includes the type of resources, capabilities
of the resources (e.g., take photos, view photos, read, write, etc.), and identity of the host mobile device (e.g., a MAC address.
IP address, name, etc.) within the network.

 

Thus,
users of the other mobile devices can view what resources are available within the ad-hoc peer-to-peer network, and request access
to any one of the resource via the security applications running on their mobile devices. For example, when a user of another
device within the ad-hoc peer-to-peer network requests to access the camera 340, the security manager of that other device
prepares a request that includes at least the following information: identify of the requesting mobile device (e.g., a MAC address,
IP address, name, etc.), the resource for which the user 345 is requesting access, and identity of the host device (e.g.,
mobile device 200 in this example) that hosts the requested resource. The security manager of that device then sends the
request to another mobile device within the network via the network interface based on the identity of the host device. If the
requesting mobile device is directly connected to the host device, the security manager is configured to send the request directly
to the host device. Otherwise, the security manager is configured to send the request to another mobile device within the network
according to a routing table.

    	 

    	 

    

 

When
the requesting device is not directly connected to the host device, the request will pass through one or more other mobile devices
within the network before reaching the host device. When a request passes through an intermediary mobile device, the security
application of the intermediary mobile device will perform several functions. First, the security manager will determine that
the request is not for one of the resources associated with the intermediary mobile device. The security manager then inserts
the identity of the intermediary mobile device into the request as part of the path of the request. Finally, based on the identity
of the host device, the security manager acts as a router to route the request either to the host device if the host device is
directly connected to the intermediary device, or to another intermediary device within the network according to the routing table.

 

Upon
receiving the request to access resource at the host device 200, the security manager 305 reviews the information
within the request and determines if the request (access) can be granted based on the identity of the requesting device and/or
the identity of the intermediary devices that the request has passed through before reaching the host device.

 

As
mentioned above, the user 345 can provide access information of known devices to the security application 220 via
the user interface 310. Thus, the security manager 305 can search through the access control list database 320
to determine if the requesting device matches any one of the known devices listed in the access control list database 320.
If the requesting device matches one of the known devices listed in the database 320. the security manager 305 will
apply the access policy indicated in the database 320 for that requesting device.

 

On
the other hand, if the requesting device is not any one of the known devices listed in the access control list database 320,
the security manager 305 is configured to obtain an access policy for the requesting device based on the identity of the
intermediary devices through which the request has passed before reaching the host device.

 

In
some embodiments, the access policy for a mobile device can be inherited from the access policy of an upstream mobile device.
Thus, in some of these embodiments, the security manager 305 is configured to retrieve the access policy of a known device
listed in the access control list database 320 that matches the identity of one of the intermediary devices. For example,
that known device can be the device that forwards the request to the host device (the device that is directly connected to the
host device).

 

As
mentioned above, the ad-hoc peer-to-peer network can include mobile devices as well as stationary devices (e.g., smart routers).
Thus, the intermediary devices that the request has to pass through before reaching the host device can include mobile devices
and/or stationary devices. It is contemplated that the same concept of access policy inheritance can be applied to stationary
devices as well.

 

Once
the access policy of the known device is retrieved, the security manager 305 can determine an access policy for the requesting
device. In some embodiments, based on the inheritance characteristics of the access level, the security manager 305 can
be configured to grant the same access policy for all other downstream devices from the known device. In other embodiments, the
security manager 305 can be configured to determine a more limited access policy to all of the downstream devices from
the known device. For example, if the known device has both read and write access to the host device’s resource, the security
manager 305 can determine that all downstream devices from that known device only has read access.

 

In
addition, instead of granting the same access policy to all of the downstream devices from the known device, the security manager
305 can also determine different access levels to the downstream devices in a cascading fashion. That is, a downstream
device that is further away (a higher degree of separation) from the host device will have a more limited access policy than a
downstream device that is closer with (a lower degree of separation from) the host device. That way, less access rights will be
given to mobile devices that are more remote (in terms of degree of separation) from the host device.

 

It
should be apparent to those skilled in the art that many more modifications besides those already described are possible without
departing from the inventive concepts herein. The inventive subject matter, therefore, is not to be restricted except in the spirit
of the appended claims. Moreover, in interpreting both the specification and the claims, all terms should be interpreted in the
broadest possible manner consistent with the context. In particular, the terms “comprises” and “comprising”
should be interpreted as referring to elements, components, or steps in a non-exclusive manner, indicating that the referenced
elements, components, or steps may be present, or utilized, or combined with other elements, components. or steps that are not
expressly referenced. Where the specification claims refers to at least one of something selected from the group consisting of
A, B, C ... and N. the text should be interpreted as requiring only one element from the group, not A plus N, or B plus N, etc.

 

What
is claimed is:

 

1.    A
method of managing resources in an ad hoc peer-to- peer network, comprising:

establishing
an ad-hoc peer-to-peer network for a plurality of devices comprising a first device that is associated with a first resource,
wherein the first device is directly connected to a second device in the peer-to-peer network;

 

granting
the second device access to the first resource according to an access policy that specifies a set of rights for accessing the
first resource;

 

receiving
a request for access to the first resource from a third device indirectly connected to the first device in the peer-to-peer network
via the second device;

 

determining
an access policy for the third device for accessing the first resource based on the access policy granted to the second device,
the access policy determined for the third device specifying a subset of the set of rights specified by the access policy granted
to the second device; and

 

providing
the third device access to the first resource according to the determined access policy.

 

2.    The
method of claim 1, wherein the third device is also connected to the first device via a fourth device.

 

3.    The
method of claim 2, further comprising determining the access policy for the third device based on the access policies granted
to both the second and fourth devices.

 

4.    The
method of claim 3, wherein the access policies granted to the second and fourth devices share a common set of rights, wherein
the access policy determined for the third device specifies a subset of the common set of rights for accessing the first resource.

 

5.    The
method of claim 3, wherein the access policies granted to the second and fourth devices do not share a common set of rights,
wherein the access policy determined for the third device specifies no right for accessing the first resource.

 

6.    The
method of claim 1, wherein the set of rights comprises at least one of: copy, write, read, contribute, and delete.

 

7.    The
method of claim 1, wherein the first resource comprises a service providing a set of features.

    	 

    	 

    

 

8.    The
method of claim 7, wherein the determined access level allows the third device to access only a subset of features provided
by the service.

 

9.    The
method of claim 1, wherein the second device is a smart router.

 

10. 
A method of managing resources in an ad hoc peer-to- peer network, comprising:

establishing
an ad-hoc peer-to-peer network for a plurality of devices comprising a first device that is associated with a first resource comprising
a document, wherein the first device is directly connected to a second device in the peer-to-peer network;

 

granting
the second device access to the first resource according to an access policy;

 

receiving
a request for access to the first resource from a third device indirectly connected to the first device in the peer-to-peer network
via the second device;

 

determining
an access policy for the third device for access the first resource based on the access policy granted to the second device, wherein
the access policy determined for the third device allows the third device to access only a portion of the document; and

 

providing
the third device access to the first resource according to the determined access policy.

 

11. The
method of claim 10, wherein the access policy determined for the third device allows the second device to access only a
redacted version of the document.

 

12. A
method of managing resources in an ad hoc peer-to-peer network, comprising:

 

establishing
an ad-hoc peer-to-peer network for a plurality of devices comprising a first device that is associated with a first resource comprising
media content, wherein the first device is directly connected to a second device in the peer-to-peer network;

 

granting
the second device access to the first resource according to an access policy;

 

receiving
a request for access to the first resource from a third device indirectly connected to the first device in the peer-to-peer network
via the second device;

 

determining
an access policy for the third device for accessing the first resource based on the access policy granted to the second device,
wherein the access policy determined for the third device allows the second device to access a portion of the media content; and

 

providing
the third device access to the first resource according to the determined access policy.

 

13.  The
method of claim 12, wherein the determined access level disallows the third device to access metadata of the media content.

 

14.  The
method of claim 12, wherein the determined access level allows the third device to access a degraded version of the media
content.

 

15.  The
method of claim 14, wherein the degraded version has a lower resolution than the original media content.

 

*   *   *   *   *Exhibit 10.2

 

EVENTURE
INTERACTIVE, INC.

 

SUBSCRIPTION
AGREEMENT

 

Ladies and Gentlemen:

 

1.            Subscription.  The
undersigned,                                         (the
“Subscriber”), intending to be legally bound, hereby irrevocably subscribes for __________ units, each unit
consisting of one share of common stock, par value $0.001 per share (the “Common Stock”), and three common
stock purchase warrants (the “Warrants“) of Eventure Interactive, Inc., a Nevada corporation (the “Company”),
at a purchase price of $1.00 per unit (the “Offering Price”), and as set forth on the signature page hereof
(the “Units”), subject to the terms and conditions of this Subscription Agreement and on the basis of the representations,
warranties, covenants and agreements contained herein. Each Warrant is exercisable for one share of Common Stock at a price of
$1.00 per share for a period of eight years from the date of issuance.

 

2.            Offering.  This
subscription is being submitted to you in accordance with and subject to the terms and conditions described in this Subscription
Agreement, as amended or supplemented from time to time, including all attachments, schedules and exhibits hereto.

 

3.            Payment.  The
Subscriber is delivering a completed and executed Signature Page to this Subscription Agreement. The Subscriber will pay for the
Units either by check payable to Eventure Interactive, Inc. or pursuant to the following wire transfer instructions:

 

	Beneficiary
    Bank:	The Northern
    Trust Company
	Beneficiary Bank ABA:	066009650
	Beneficiary Account Number:	1171005938
	Beneficiary Account Name:	Eventure Interactive,
    Inc.

 

4.            Representations,
Warranties and Covenants.  The Subscriber hereby acknowledges, represents, warrants, and covenants as follows:

 

(a)          None
of the Units or underlying securities offered pursuant to this Subscription Agreement are registered under the Securities Act
of 1933, as amended (the “Securities Act”), or any state securities laws. The Subscriber understands that the
offering and sale of the Units is intended to be exempt from registration under the Securities Act, by virtue of Section 4(a)(2)
thereof and/or Rule 506 of Regulation D under the Securities Act;

 

(b)          Prior
to the execution of this Subscription Agreement, the Subscriber and the Subscriber’s attorney, accountant, Subscriber representative
and/or tax adviser, if any (collectively, the “Advisers”), have received this Agreement and all other documents
requested by the Subscriber, have carefully reviewed them and understand the information contained therein;

 

    	 

    	 

    

 

(c)          Neither
the Securities and Exchange Commission (the “SEC’) nor any state securities commission or other regulatory
authority has approved the Units or passed upon or endorsed the merits of the Offering;

 

(d)          All
documents, records, and books pertaining to the investment in the Units have been made available for inspection by such Subscriber
and its Advisers, if any;

 

(e)          The
Subscriber and its Advisers, if any, have had a reasonable opportunity to ask questions of and receive answers from a person or
persons acting on behalf of the Company concerning the offering of the Units and the business, financial condition and results
of operations of the Company, and all such questions have been answered to the full satisfaction of the Subscriber and its Advisers,
if any;

 

(f)          In
evaluating the suitability of an investment in the Company, the Subscriber has not relied upon any representation or information
(oral or written) other than as stated herein or as set forth in the Company’s filings with the SEC;

 

(g)          The
Subscriber is unaware of, is in no way relying on, and did not become aware of the Offering of the Units through or as a result
of, any form of general solicitation or general advertising including, without limitation, any article, notice, advertisement
or other communication published in any newspaper, magazine or similar media or broadcast over television, radio or the Internet
(including, without limitation, internet “blogs,” bulletin boards, discussion groups and social networking sites)
in connection with the Offering and sale of the Units and is not subscribing for the Units and did not become aware of the Offering
through or as a result of any seminar or meeting to which the Subscriber was invited by, or any solicitation of a subscription
by, a person not previously known to the Subscriber in connection with investments in securities generally;

 

(h)          The
Subscriber has taken no action that would give rise to any claim by any person for brokerage commissions, finders’ fees
or the like relating to this Subscription Agreement or the transactions contemplated hereby (other than commissions to be paid
by the Company to other participating broker-dealers, if any);

 

(i)          The
Subscriber, together with its Advisers, if any, has such knowledge and experience in financial, tax, and business matters, and,
in particular, investments in securities, so as to enable it to utilize the information made available to it in connection with
the Offering to evaluate the merits and risks of an investment in the Units and the Company and to make an informed investment
decision with respect thereto;

 

    	2

    	 

    

  

(j)          The
Subscriber is not relying on the Company, or any of its employees or agents with respect to the legal, tax, economic and related
considerations of an investment in the Units (including the underlying securities), and the Subscriber has relied on the advice
of, or has consulted with, only its own Advisers;

 

(k)          The
Subscriber is acquiring the Units (including the underlying securities) solely for such Subscriber’s own account for investment
purposes only and not with a view to or intent of resale or distribution thereof, in whole or in part. The Subscriber has no agreement
or arrangement, formal or informal, with any person to sell or transfer all or any part of the Units and the Subscriber has no
plans to enter into any such agreement or arrangement;

 

(l)          The
Subscriber must bear the substantial economic risks of the investment in the Units indefinitely because none of the securities
included in the Units may be sold, hypothecated or otherwise disposed of unless subsequently registered under the Securities Act
and applicable state securities laws or an exemption from such registration is available (including, without limitation, under
Regulation S). Legends to the following effect shall be placed on the securities included in the Units to the effect that they
have not been registered under the Securities Act or applicable state securities laws:

 

THE
SECURITIES REPRESENTED HEREBY AND THE SECURITIES ISSUABLE UPON THE EXERCISE HEREOF HAVE NOT BEEN REGISTERED UNDER THE UNITED STATES
SECURITIES ACT OF 1933, AS AMENDED (THE “U.S. SECURITIES ACT”). THE HOLDER HEREOF, BY PURCHASING SUCH SECURITIES,
AGREES FOR THE BENEFIT OF THE COMPANY THAT SUCH SECURITIES MAY BE OFFERED, SOLD, PLEDGED OR OTHERWISE TRANSFERRED ONLY IN ACCORDANCE
WITH (I) REGULATION S UNDER THE U.S. SECURITIES ACT, IF AVAILABLE, (II) ANY OTHER EXEMPTION FROM REGISTRATION UNDER THE U.S. SECURITIES
ACT, IF AVAILABLE, OR (III) UNDER AN EFFECTIVE REGISTRATION STATEMENT, AND, IN EACH CASE, IN COMPLIANCE WITH ANY APPLICABLE STATE
SECURITIES LAWS. IN ADDITION, HEDGING TRANSACTIONS INVOLVING THE SECURITIES REPRESENTED HEREBY AND THE SECURITIES ISSUABLE UPON
THE EXERCISE HEREOF MAY NOT BE CONDUCTED UNLESS IN COMPLIANCE WITH THE U.S. SECURITIES ACT. EXCEPT FOR TRANSACTIONS THAT COMPLY
WITH S.E.C. RULE 144 UNDER THE SECURITIES ACT, RELIANCE ON AN EXEMPTION FROM REGISTRATION WILL REQUIRE THE HOLDER TO PROVIDE
THE COMPANY WITH AN OPINION OF COUNSEL, WHICH COUNSEL AND OPINION MUST BE SATISFACTORY TO THE COMPANY.

 

    	3

    	 

    

  

Appropriate
notations will be made in the Company’s stock books to the effect that the Units and underlying securities have not been
registered under the Securities Act or applicable state securities laws. Stop transfer instructions will be placed with the transfer
agent of the shares underlying the Units and the Warrants. There can be no assurance that there will be any market for resale
of the Common Stock, nor can there be any assurance that such securities will be freely transferable at any time in the foreseeable
future;

 

(m)          The
Subscriber has adequate means of providing for such Subscriber’s current financial needs and foreseeable contingencies and
has no need for liquidity of its investment in the Units for an indefinite period of time;

 

(n)          The
Subscriber is aware that an investment in the Units is high risk, involving a number of very significant risks and, in particular,
acknowledges that the Company has a limited operating history, has had operating losses since inception, and is engaged in a highly
competitive business;

 

(o)          The
Subscriber (i) if a natural person, represents that the Subscriber has reached the age of 21 and has full power and authority
to execute and deliver this Subscription Agreement and all other related agreements or certificates and to carry out the provisions
hereof and thereof; (ii) if a corporation, partnership, or limited liability company or partnership, or association, joint stock
company, trust, unincorporated organization or other entity, represents that such entity was not formed for the specific purpose
of acquiring the Units, such entity is duly organized, validly existing and in good standing under the laws of the state of its
organization, the consummation of the transactions contemplated hereby is authorized by, and will not result in a violation of
state law or its charter or other organizational documents, such entity has full power and authority to execute and deliver this
Subscription Agreement and all other related agreements or certificates and to carry out the provisions hereof and thereof and
to purchase and hold the securities constituting the Units, the execution and delivery of this Subscription Agreement has been
duly authorized by all necessary action, this Subscription Agreement has been duly executed and delivered on behalf of such entity
and is a legal, valid and binding obligation of such entity; or (iii) if executing this Subscription Agreement in a representative
or fiduciary capacity, represents that it has full power and authority to execute and deliver this Subscription Agreement in such
capacity and on behalf of the subscribing individual, ward, partnership, trust, estate, corporation, or limited liability company
or partnership, or other entity for whom the Subscriber is executing this Subscription Agreement, and such individual, partnership,
ward, trust, estate, corporation, or limited liability company or partnership, or other entity has full right and power to perform
pursuant to this Subscription Agreement and make an investment in the Company, and represents that this Subscription Agreement
constitutes a legal, valid and binding obligation of such entity. The execution and delivery of this Subscription Agreement will
not violate or be in conflict with any order, judgment, injunction, agreement or controlling document to which the Subscriber
is a party or by which it is bound;

 

    	4

    	 

    

  

(p)          The
Subscriber and the Advisers, if any, have had the opportunity to obtain any additional information, to the extent the Company
has such information in its possession or could acquire it without unreasonable effort or expense, necessary to verify the accuracy
of the information contained herein and in all documents received or reviewed in connection with the purchase of the Units and
have had the opportunity to have representatives of the Company provide them with such additional information regarding the terms
and conditions of this particular investment and the financial condition, results of operations, business of the Company deemed
relevant by the Subscriber or the Advisers, if any, and all such requested information, to the extent the Company had such information
in its possession or could acquire it without unreasonable effort or expense, has been provided to the full satisfaction of the
Subscriber and the Advisers, if any;

 

(q)          Any
information which the Subscriber has heretofore furnished or is furnishing herewith to the Company is complete and accurate and
may be relied upon by the Company in determining the availability of an exemption from registration under federal and state securities
laws in connection with the offering of the Units as described herein. The Subscriber further represents and warrants that it
will notify and supply corrective information to the Company immediately upon the occurrence of any change therein occurring prior
to the Company’s issuance of the securities contained in the Units;

 

(r)          The
Subscriber has significant prior investment experience, including investment in non-listed and non-registered securities. The
Subscriber is knowledgeable about investment considerations in development-stage companies with limited operating histories. The
Subscriber has a sufficient net worth to sustain a loss of its entire investment in the Company in the event such a loss should
occur. The Subscriber’s overall commitment to investments which are not readily marketable is not excessive in view of the
Subscriber’s net worth and financial circumstances and the purchase of the Units will not cause such commitment to become
excessive. The investment is a suitable one for the Subscriber;

 

(s)          The
Subscriber is satisfied that the Subscriber has received adequate information with respect to all matters which it or the Advisers,
if any, consider material to its decision to make this investment;

 

(t)          The
Subscriber acknowledges that any estimates or forward-looking statements or projections included herein or in any other materials
that might have been provided to the Subscriber by the Company were prepared by the Company in good faith but that the attainment
of any such projections, estimates or forward-looking statements cannot be guaranteed by the Company and should not be relied
upon;

 

(u)          No
oral or written representations have been made, or oral or written information furnished, to the Subscriber or the Advisers, if
any, in connection with the Offering which are in any way inconsistent with the information contained herein;

 

    	5

    	 

    

  

(v)         Within
five (5) days after receipt of a request from the Company, the Subscriber will provide such information and deliver such documents
as may reasonably be necessary to comply with any and all laws and ordinances to which the Company is subject;

 

(w)          THE
SECURITIES OFFERED HEREBY HAVE NOT BEEN REGISTERED UNDER THE SECURITIES ACT OF 1933, AS AMENDED, OR ANY STATE SECURITIES LAWS
AND ARE BEING OFFERED AND SOLD IN RELIANCE ON EXEMPTIONS FROM THE REGISTRATION REQUIREMENTS OF SAID ACT AND SUCH LAWS. THE SECURITIES
ARE SUBJECT TO RESTRICTIONS ON TRANSFERABILITY AND RESALE AND MAY NOT BE TRANSFERRED OR RESOLD EXCEPT AS PERMITTED UNDER SAID
ACT AND SUCH LAWS PURSUANT TO REGISTRATION OR EXEMPTION THEREFROM. THE SECURITIES HAVE NOT BEEN RECOMMENDED, APPROVED OR DISAPPROVED
BY THE SECURITIES AND EXCHANGE COMMISSION, ANY STATE SECURITIES COMMISSION OR ANY OTHER REGULATORY AUTHORITY, NOR HAVE ANY OF
THE FOREGOING AUTHORITIES PASSED UPON OR ENDORSED THE MERITS OF THIS OFFERING OR THE ACCURACY OR ADEQUACY OF THIS SUBSCRIPTION
AGREEMENT. ANY REPRESENTATION TO THE CONTRARY IS UNLAWFUL;

 

(x)          In
making an investment decision, investors must rely on their own examination of the Company and the terms of the Offering, including
the merits and risks involved. The Subscriber should be aware that it will be required to bear the financial risks of this investment
for an indefinite period of time; and

 

(y)          The
Subscriber is an accredited investor as set forth in the Accredited Investor Certification attached hereto.

 

    	6

    	 

    

(z)          The
Subscriber represents that neither it nor, to its knowledge, any person or entity controlling, controlled by or under common control
with it, nor any person having a beneficial interest in it, nor any person on whose behalf the Subscriber is acting: (i) is a
person listed in the Annex to Executive Order No. 13224 (2001) issued by the President of the United States (Executive Order Blocking
Property and Prohibiting Transactions with Persons Who Commit, Threaten to Commit, or Support Terrorism); (ii) is named on the
List of Specially Designated Nationals and Blocked Persons maintained by the U.S. Office of Foreign Assets Control; (iii) is a
non-U.S. shell bank or is providing banking services indirectly to a non-U.S. shell bank; (iv) is a senior non-U.S. political
figure1 or an immediate family member2 or close associate3 of such figure; or (v) is otherwise
prohibited from investing in the Company pursuant to applicable U.S. anti-money laundering, anti-terrorist and asset control laws,
regulations, rules or orders (categories (i) through (v), each a “Prohibited Subscriber”). The Subscriber agrees
to provide the Company, promptly upon request, all information that the Company reasonably deems necessary or appropriate to comply
with applicable U.S. anti-money laundering, anti-terrorist and asset control laws, regulations, rules and orders. The Subscriber
consents to the disclosure to U.S. regulators and law enforcement authorities by the Company and its affiliates and agents of
such information about the Subscriber as the Company reasonably deems necessary or appropriate to comply with applicable U.S.
antimony laundering, anti-terrorist and asset control laws, regulations, rules and orders. If the Subscriber is a financial institution
that is subject to the USA Patriot Act, the Subscriber represents that it has met all of its obligations under the USA Patriot
Act. The Subscriber acknowledges that if, following its investment in the Company, the Company reasonably believes that the Subscriber
is a Prohibited Subscriber or is otherwise engaged in suspicious activity or refuses to promptly provide information that the
Company requests, the Company has the right or may be obligated to prohibit additional investments, segregate the assets constituting
the investment in accordance with applicable regulations or immediately require the Subscriber to transfer the Units (including
the underlying securities). The Subscriber further acknowledges that the Subscriber will have no claim against the Company or
any of its affiliates or agents for any form of damages as a result of any of the foregoing actions.

 

(aa)         If
the Subscriber is affiliated with a non-U.S. banking institution (a “Foreign Bank”), or if the Subscriber receives
deposits from, makes payments on behalf of, or handles other financial transactions related to a Foreign Bank, the Subscriber
represents and warrants to the Company that: (1) the Foreign Bank has a fixed address, other than solely an electronic address,
in a country in which the Foreign Bank is authorized to conduct banking activities; (2) the Foreign Bank maintains operating records
related to its banking activities; (3) the Foreign Bank is subject to inspection by the banking authority that licensed the Foreign
Bank to conduct banking activities; and (4) the Foreign Bank does not provide banking services to any other Foreign Bank that
does not have a physical presence in any country and that is not a regulated affiliate.

 

5.          Representations,
Warranties and Covenants of the Company.  The Company hereby represents, warrants and covenants to the Subscriber
the following:

  

 

1
A “senior non-U.S. political figure” is defined as a senior official in the
executive, legislative, administrative, military or judicial branches of a foreign government (whether elected or not), a senior
official of a major foreign political party, or a senior executive of a foreign government-owned corporation. In addition, a “senior
foreign political figure” includes any corporation, business or other entity that has been formed by, or for the benefit
of, a senior foreign political figure.

 

2
“Immediate family” of a senior foreign political figure typically includes
the figure’s parents, siblings, spouse, children and in-laws.

 

3
A “close associate” of a senior foreign political figure is a person who is
widely and publicly known to maintain an unusually close relationship with the senior foreign political figure, and includes a
person who is in a position to conduct substantial domestic and international financial transactions on behalf of the senior foreign
political figure.

    	7

    	 

    

  

(a)          Organization
and Qualification.  The Company is a corporation duly organized and validly existing under the laws of the State
of Nevada. The Company has all requisite power and authority to carry on its business as currently conducted. The Company is duly
qualified to transact business in each jurisdiction in which the failure to be so qualified would reasonably be expected to have
a material adverse effect.

 

(b)          Authorization.  As
of the Closing, all action on the part of the Company, its board of directors, officers and existing stockholders necessary for
the authorization, execution and delivery of this Agreement, and the performance of all obligations of the Company hereunder shall
have been taken, and this Agreement, assuming due execution by the parties hereto, will constitute valid and legally binding obligations
of the Company, enforceable in accordance with its terms, subject to: (i) judicial principles limiting the availability of specific
performance, injunctive relief, and other equitable remedies and (ii) bankruptcy, insolvency, reorganization, moratorium or other
similar laws now or hereafter in effect generally relating to or affecting creditors’ rights.

 

(c)          Valid
Issuance of the Common Stock.  The shares of Common Stock, when issued, sold and delivered in accordance with the
terms of this Agreement for the consideration expressed herein, shall be duly and validly issued and will be free of restrictions
on transfer directly or indirectly created by the Company other than restrictions on transfer under this Agreement and under applicable
federal and state securities laws.

 

(d)          Governmental
Consents.  No consent, approval, order or authorization of, or registration, qualification, designation, declaration
or filing with, any federal, state or local governmental authority on the part of the Company is required in connection with the
offer, sale or issuance of Units, except for the following: (i) the filing by the Company of such notices as may be required under
the Securities Act and (ii) the compliance with any applicable state securities laws, which compliance will have occurred within
the appropriate time periods therefor.

 

    	8

    	 

    

(e)          Litigation.  There
are no actions, suits, proceedings or investigations pending or, to the best of the Company’s knowledge, threatened before
any court, administrative agency or other governmental body against the Company which (i) question the validity of this Agreement
or the right of the Company to enter into this Agreement, or to consummate the transaction contemplated hereby or (ii) the
Company believes may result in a material liability to the Company or impact its business in any material adverse respect. The
Company is not a party or subject to, and none of its assets is bound by, the provisions of any order, writ, injunction, judgment
or decree of any court or government agency or instrumentality.

 

(f)          Compliance
with Other Instruments.  The Company is not in violation or default of any provision of its Articles of Incorporation,
as in effect immediately prior to the Closing. The Company is not in violation or default of any provision of any material instrument,
mortgage, deed of trust, loan, contract, commitment, judgment, decree, order or obligation to which it is a party or by which
it or any of its properties or assets are bound. The Company is not in violation or default of any provision of any federal, state
or local statute, rule or governmental regulation. The execution, delivery and performance of and compliance with this Agreement
and the issuance of the Units (including the underlying securities), will not result in any such violation, be in conflict with
or constitute, with or without the passage of time or giving of notice, a default under any such provision, require any consent
or waiver under any such provision (other than any consents or waivers that have been obtained), or result in the creation of
any mortgage, pledge, lien, encumbrance or charge upon any of the properties or assets of the Company pursuant to any such provision.
The shares of Common Stock issuable upon any exercise of the Warrants have been fully reserved for such issuance by all necessary
corporate actions.

 

(g)          Certain
Registration Matters.  Assuming the accuracy of the Subscriber’s representations and warranties set forth
in this Agreement, no registration under the Securities Act is required for the offer and issuance of the Units (including the
underlying securities) by the Company to the Subscriber hereunder.

 

(h)          Financial
Statements.  The Company has provided to Subscriber copies of the following financial statements of the Company:
(i) unaudited balance sheet (the “Balance Sheet”) as of March 31, 2014 (the “Balance Sheet Date”);
(ii) unaudited statement of operations for the three month period ended on the Balance Sheet Date; and (iii) unaudited
balance sheet and statement of operations as of and for the years ended December 31, 2012 and 2013. Such financial statements
have been prepared in accordance with generally accepted accounting principles consistently applied and the Balance Sheet presents
fairly the financial condition of the Company as of the Balance Sheet Date. The Balance Sheet does not exclude any material asset
or omit to state any material liability, absolute or contingent, or other material fact, that is required under generally accepted
accounting principles to be included therein.

 

    	9

    	 

    

 

(i)          Liabilities
of the Company.  Except for the liabilities shown on the Balance Sheet, and similar liabilities incurred since the
Balance Sheet Date in the ordinary course of the Company’s business, there are no material liabilities or obligations incurred
by the Company of any kind, character or description, whether accrued, absolute, contingent or otherwise. All of the liabilities
reflected in the Balance Sheet have been incurred by the Company in the ordinary course of its business.

 

(j)          No
General Solicitation.  Neither the Company nor any person acting on behalf of the Company has offered or sold any
of the Units by any form of general solicitation or general advertising (within the meaning of Regulation D).

 

(k)          Piggyback
Registration Rights.  (i) The Subscriber will have piggyback registration rights with respect to the registration
under the Securities Act of the shares of Common Stock purchased by Subscriber or issuable upon the exercise of the Warrants (singly
and collectively, the “Registrable Securities”). If, after the date hereof, the Company shall determine to register
for sale for cash any of its Common Stock, for its own account or for the account of others (other than the Subscriber), other
than (x) a registration relating solely to employee benefit plans or securities issued or issuable to employees, consultants (to
the extent the securities owned or to be owned by such consultants could be registered on Form S-8) or any of their family members
(including a registration on Form S-8) or (y) a registration relating solely to a Securities Act Rule 145 transaction or a registration
on Form S-4 in connection with a merger, acquisition, divestiture, reorganization or similar event, then the Company shall promptly
give to the Subscriber written notice thereof (and in no event shall such notice be given less than twenty (20) calendar days
prior to the filing of such registration statement), and shall, subject to Section 5(k)(ii), include as a piggyback registration
all of the Registrable Securities specified in a written request delivered by the Subscriber thereof within ten (10) calendar
days after delivery to the Subscriber of such written notice from the Company. However, the Company may, without the consent of
the Subscriber, withdraw such registration statement prior to its becoming effective if the Company has elected to abandon the
proposal to register the securities proposed to be registered thereby.

 

    	10

    	 

    

  

(ii)         If
a piggyback registration is for a registered public offering that is to be made by an underwriting, the Company shall so advise
the Subscriber of the Registrable Securities eligible for inclusion in such Registration Statement pursuant to Section 5(k)(i).
In that event, the right of the Subscriber to piggyback registration shall be conditioned upon such Subscriber’s participation
in such underwriting and the inclusion of such Subscriber’s Registrable Securities in the underwriting to the extent provided
herein. All Subscribers proposing to sell any of their Registrable Securities through such underwriting shall (together with the
Company and any other stockholders of the Company selling their securities through such underwriting) enter into an underwriting
agreement in customary form with the underwriter selected for such underwriting by the Company or such other selling stockholders,
as applicable. Notwithstanding any other provision of this Section 5(k)(ii), if the underwriter or the Company determines that
marketing factors require a limitation on the number of shares of Common Stock or the amount of other securities to be underwritten,
the underwriter may exclude some or all Registrable Securities from such registration and underwriting. The Company shall so advise
the Subscriber and all other Subscribers similarly situated (except those Subscribers who failed to timely elect to include their
Registrable Securities through such underwriting or have indicated to the Company their decision not to do so), and indicate to
each such Subscriber the number of shares of Registrable Securities that may be included in the registration and underwriting,
if any. All cutbacks of the amount of Registrable Securities to be included on behalf of the Subscriber and all other Subscribers
similarly situated will be made in proportion to their respective subscription amounts.

 

No
Registrable Securities excluded from the underwriting by reason of the underwriter’s marketing limitation shall be included
in such registration. If the Subscriber disapproves of the terms of any such underwriting, such Subscriber may elect to withdraw
the Subscriber’s Registrable Securities therefrom by delivering a written notice to the Company and the underwriter. The
Registrable Securities so withdrawn from such underwriting shall also be withdrawn from such registration; provided, however,
that, if by the withdrawal of such Registrable Securities, a greater number of Registrable Securities held by other Subscribers
may be included in such registration (up to the maximum of any limitation imposed by the underwriters), then the Company shall
offer to all Subscribers who have included Registrable Securities in the registration the right to include additional Registrable
Securities pursuant to the terms and limitations set forth herein in the same proportion used above in determining the underwriter
limitation.

 

    	11

    	 

    

(l)          Participation
Rights.  For a period of eight years from the date hereof, Subscriber shall be entitled to participate on a pro
rata basis with the Company’s other stockholders in any sale of Common Stock consisting of more than 20% of the then issued
and outstanding Common Stock (a “Sale Transaction”). The Company shall give written notice to Subscriber describing
in reasonable detail the number of shares to be sold, the price and other terms and conditions of a proposed Sale Transaction,
and the identity of the prospective buyer(s) (such notice, the "Sale Notice"). Subscriber shall be entitled, within
15 days following delivery of the Sale Notice, to give written notice (a "Tag Along Notice") to the Company that Subscriber
desires to participate in such proposed Sale Transaction upon the price, terms and conditions set forth in the Sale Notice, which
Tag Along Notice shall specify the shares Subscriber desires to include in such proposed Sale Transaction; provided, however,
that Subscriber’s maximum participation shall be based on the number of shares held by Subscriber, including all shares
owned by the Subscriber as the result of the exercise of the Warrants, relative to the number of shares held by all of the stockholders
who propose to participate in the Sale Transaction. The Company shall use reasonable efforts to obtain the prospective buyer's
agreement to include all shares required to be included in such Sale Transaction hereunder on the terms described herein, and
shall not consent to or consummate any such Sale Transaction unless such shares are so included.

 

(m)          Preemptive
Rights.

 

(i)          If
the Company authorizes the issuance or sale of any additional securities (“Additional Securities”) (other than issuances
(A) of Units pursuant to Subscription Agreements entered into concurrently with this Agreement, (B) as consideration
for the acquisition of another company or business, (C) of Common Stock upon exercise of the Warrant, (D) of stock options
to employees under a Qualified Stock Option Plan or of Common Stock upon exercise of such options, (E) of securities issuable
upon the exercise or conversion of presently outstanding Company securities, or (F) in connection with any split or combination
of Common Stock), the Company shall first offer to sell to Subscriber a portion of such Additional Securities equal to the product
of (x) the number of Additional Securities to be issued and (y) Subscriber's pro rata share of all Common Stock held by all stockholders
as of such date (Subscriber's "Proportional Share"). Subscriber shall be entitled to purchase all or any portion of
Subscriber’s Proportional Share of such Additional Securities at the most favorable price and on the most favorable terms
as such Additional Units are to be offered to any other person, provided that if all persons entitled to purchase
or receive such Additional Securities are required to also purchase other securities of the Company, and if Subscriber exercises
the right to purchase Additional Securities, Subscriber shall also be required to purchase the same strip of securities on the
same terms and conditions that such other persons are required to purchase. The purchase price for all Additional Securities offered
to Subscriber shall be payable in cash or, to the extent otherwise consistent with the terms offered to any other person, installments
over time.

 

    	12

    	 

    

  

(ii)         In
order to exercise its purchase rights hereunder, Subscriber must within 10 days after receipt of written notice from the Company
describing in reasonable detail the Additional Securities being offered, the purchase price therefor, the payment terms and Subscriber's
Proportional Share, deliver a written notice to the Company describing Subscriber’s election hereunder.

 

(iii)        Upon
the expiration of the offering periods described above, the Company shall be entitled to sell any Additional Securities that Subscriber
has not elected to purchase during the 90 days following such expiration on terms and conditions no more favorable to the
purchasers thereof than those offered to Subscriber. Any Additional Securities offered or sold by the Company after such 90-day
period or offered by the Company on terms or conditions more favorable than those offered to Subscriber must be reoffered to Subscriber
pursuant to the terms of this Section 5(m) prior to any issuance or sale thereof.

 

(iv)        Notwithstanding
anything to the contrary set forth herein, in lieu of offering any securities to Subscriber at the time such securities are offered
to another person, the Company may comply with the provisions of this Section 5(m) by making an offer to sell to Subscriber
its Proportional Share of such Additional Securities promptly after a sale to such other person is effected. In such event, for
all purposes of this Section 5(m), Subscriber's Proportional Share shall be determined taking into consideration the actual
number of securities sold to all other persons so as to achieve the same economic effect as if such offer had been made prior
to such sale.

 

(v)         The
rights of Subscriber under this Section 5(m) shall terminate eight years from the date hereof.

 

6.          Modification.  This
Subscription Agreement shall not be modified or waived except by an instrument in writing signed by the party against whom any
such modification or waiver is sought.

 

7.          Notices.  Any
notice or other communication required or permitted to be given hereunder shall be in writing and shall be mailed by certified
mail, return receipt requested, or delivered against receipt to the party to whom it is to be given (a) if to the Company, 3420
Bristol Street, 6th Floor, Costa Mesa, CA 92626 or (b) if to the Subscriber, at the address set forth on the signature
page hereof (or, in either case, to such other address as the party shall have furnished in writing in accordance with the provisions
of this Section 12). Any notice or other communication given by certified mail shall be deemed given at the time of certification
thereof, except for a notice changing a party’s address which shall be deemed given at the time of receipt thereof.

 

    	13

    	 

    

 

 

8.          Assignability.  This
Subscription Agreement and the rights, interests and obligations hereunder are not transferable or assignable by the Subscriber
and the transfer or assignment of the Units, including the underlying securities, shall be made only in accordance with all applicable
laws.

 

9.          Applicable
Law.  This Subscription Agreement shall be governed by and construed in accordance with the laws of the State of
California, without reference to the principles thereof relating to conflicts of law. The venue for any disputes between Subscriber
and the Company shall be exclusively in the federal and state courts located in Los Angeles, California.

 

10.         Confidentiality.  The
Subscriber acknowledges and agrees that any information or data the Subscriber has acquired from or about the Company or may acquire
in the future that is prominently marked as being “CONFIDENTIAL” and that is not otherwise properly in the public
domain, was received in confidence. The Subscriber agrees not to divulge, communicate or disclose, except as may be required by
law or for the performance of this Subscription Agreement, or use to the detriment of the Company or for the benefit of any other
person, or misuse in any way, any such confidential information of the Company, including any scientific, technical, trade or
business secrets of the Company and any scientific, technical, trade or business materials that are so marked and that are treated
by the Company as confidential or proprietary, including, but not limited to, internal personnel and financial information of
the Company or its affiliates, the manner and methods of conducting the business of the Company or its affiliates and confidential
information obtained by or given to the Company about or belonging to third parties. The Subscriber understands that the Company
may rely on his agreement of confidentiality to comply with the exemptive provisions of Regulation FD under the Securities Act
as set forth in Rule 100(a)(b)(2)(ii) of Regulation FD. In addition, the Subscriber acknowledges that such Subscriber is aware
that the United States securities laws generally prohibit any person who is in possession of material nonpublic information about
a public company such as the Company from purchasing or selling securities of such company.

 

11.         Miscellaneous.

 

(a)          This
Subscription Agreement constitutes the entire agreement between the Subscriber and the Company with respect to the Offering and
supersedes all prior oral or written agreements and understandings, if any, relating to the subject matter hereof. The terms and
provisions of this Subscription Agreement may be waived, or consent for the departure therefrom granted, only by a written document
executed by the party entitled to the benefits of such terms or provisions.

 

(b)          The
representations and warranties of the Company and the Subscriber made in this Subscription Agreement shall survive the execution
and delivery hereof and delivery of the Units (including the underlying securities).

 

    	14

    	 

    

 

 

(c)          Each
of the parties hereto shall pay its own fees and expenses (including the fees of any attorneys, accountants, appraisers or others
engaged by such party) in connection with this Subscription Agreement and the transactions contemplated hereby whether or not
the transactions contemplated hereby are consummated.

 

(d)          This
Subscription Agreement may be executed in one or more original or facsimile counterparts, each of which shall be deemed an original,
but all of which shall together constitute one and the same instrument.

 

(e)          Each
provision of this Subscription Agreement shall be considered separable and, if for any reason any provision or provisions hereof
are determined to be invalid or contrary to applicable law, such invalidity or illegality shall not impair the operation of or
affect the remaining portions of this Subscription Agreement.

 

(f)          Paragraph
titles are for descriptive purposes only and shall not control or alter the meaning of this Subscription Agreement as set forth
in the text.

 

(g)          The
Subscriber hereby agrees to furnish the Company such other information as the Company may request prior to the Closing with respect
to its subscription hereunder.

 

12.         Public
Disclosure.  Neither the Subscriber nor any officer, manager, director, member, partner, stockholder, employee,
affiliate, affiliated person or entity of the Subscriber shall make or issue any press releases or otherwise make any public statements
or make any disclosures to any third person or entity with respect to the transactions contemplated herein and will not make or
issue any press releases or otherwise make any public statements of any nature whatsoever with respect to the Company without
the Company’s express prior approval. The Company has the right to withhold such approval in its sole discretion.

 

[REMAINDER
OF PAGE INTENTIONALLY LEFT BLANK]

 

    	15

    	 

    

 

To subscribe
for Units of Eventure Interactive, Inc.:

 

		1.	Date
                                         and Sign the following:

 

		a.	Signature
                                         Page of the Subscription Agreement (page 12);

 

		b.	the
                                         Accredited Investor Certification (page 13-14);

 

		c.	Investor
                                         Profile (page 15); and

 

		d.	Anti-Money
                                         Laundering (AML) Form (page 17)

 

		2.	Fax
                                         or email all forms and then send all signed original documents to:

 

Gottbetter
& Partners, LLP

488
Madison Avenue, 12th Floor

New
York, NY 10022

Facsimile
Number:  212.400.6901

Telephone
Number:  212.400.6900

Attention:  Linda
Kalayjian 

Email:  LBK@gottbetter.com

 

    	16

    	 

    

 

EVENTURE
INTERACTIVE, INC.

SIGNATURE PAGE
TO THE

SUBSCRIPTION
AGREEMENT

 

Subscriber
hereby elects to subscribe under the Subscription Agreement for a total of _______ Units (NOTE: to be completed by subscriber)
and executes the Subscription Agreement.

Date (NOTE: To be completed by
subscriber): __________, 2014

 

 

 

If
the Subscriber is an INDIVIDUAL, and if purchased as JOINT TENANTS, as TENANTS IN COMMON, or as COMMUNITY PROPERTY:

 

	  
	 	 
	Print Name(s)	 	Social Security Number(s)
	 	 	 
	 	 	 
	Signature(s) of Subscriber(s)	 	Signature
	 	 	 
	 	 	 
	Date	 	Address

 

If the Subscriber
is a PARTNERSHIP, CORPORATION, LIMITED LIABILITY COMPANY OR TRUST:

	 	 	 

	 	 	 
	Name
    of Partnership, Corporation, Limited Liability Company or Trust	 	Federal
    Taxpayer Identification Number
	 	 	 
	By:	 	 	 
	Name: 

        Title:
	 	State of Organization
	 	 	 

         

	Date	 	Address
	 	 	 
	EVENTURE INTERACTIVE,
        INC.

        a Nevada corporation
	 	 
	 	 	 
	By:	 	 	 	 
	Gannon
    Giguiere, Chief Executive Officer 	 	 

    	17

    	 

    

 

EVENTURE
INTERACTIVE, INC.

 ACCREDITED
INVESTOR CERTIFICATION

 

	 	 	 	 	For
        Individual Investors Only

        (all
        Individual Investors must INITIAL where appropriate):

	 	 	 	 	 
	Initial	 	         	 	I have a net worth
    (including homes, furnishings and automobiles, but excluding for these purposes the value of my primary residence and any
    debt secured by such residence) in excess of $1 million either individually or through aggregating my individual holdings
    and those in which I have a joint, community property or other similar shared ownership interest with my spouse.
	Initial	 	         	 	I have had an annual
    gross income for the past two years of at least $200,000 (or $300,000 jointly with my spouse) and expect my income (or joint
    income, as appropriate) to reach the same level in the current year.
	 	 	 	 	 
	 	 	 	 	For
        Non-Individual Investors

        (all
        Non-Individual Investors must INITIAL where appropriate):

	 	 	 	 	 
	Initial	 	         	 	The investor certifies
    that it is a partnership, corporation, limited liability company or business trust that is 100% owned by persons who meet
    at least one of the criteria for Individual Investors set forth above.
	Initial	 	         	 	The investor certifies
    that it is a partnership, corporation, limited liability company or business trust that has total assets of at least $5 million
    and was not formed for the purpose of investing in the Company.
	Initial	 	         	 	The investor certifies
    that it is an employee benefit plan whose investment decision is made by a plan fiduciary (as defined in ERISA §3(21))
    that is a bank, savings and loan association, insurance company or registered investment adviser.
	Initial	 	         	 	The investor certifies
    that it is an employee benefit plan whose total assets exceed $5,000,000 as of the date of this Agreement.
	Initial	 	         	 	The undersigned certifies
    that it is a self-directed employee benefit plan whose investment decisions are made solely by persons who meet either of
    the criteria for Individual Investors.
	Initial	 	         	 	The investor certifies
    that it is a U.S. bank, U.S. savings and loan association or other similar U.S. institution acting in its individual or fiduciary
    capacity.
	Initial	 	         	 	The undersigned certifies
    that it is a broker-dealer registered pursuant to §15 of the Securities Exchange Act of 1934.
	Initial	 	         	 	The investor certifies
    that it is an organization described in §501(c)(3) of the Internal Revenue Code with total assets exceeding $5,000,000
    and not formed for the specific purpose of investing in the Company.
	Initial	 	         	 	The investor certifies
    that it is a trust with total assets of at least $5,000,000, not formed for the specific purpose of investing in the Company,
    and whose purchase is directed by a person with such knowledge and experience in financial and business matters that he is
    capable of evaluating the merits and risks of the prospective investment.
	Initial	 	         	 	The investor certifies
    that it is a plan established and maintained by a state or its political subdivisions, or any agency or instrumentality thereof,
    for the benefit of its employees, and which has total assets in excess of $5,000,000.
	Initial	 	         	 	The investor certifies
    that it is an insurance company as defined in §2(13) of the Securities Act of 1933, as amended, or a registered investment
    company.

    	18

    	 

    

	 	 	 	 	For
        Non-U.S. Person Investors

        (all
        Investors who are not a U.S. Person must INITIAL this section):

	 	 	 	 	 
	Initial	 	         	 	The
        investor is not a “U.S. Person” as defined in Regulation S; and specifically the investor is not:

         

        A.       a
        natural person resident in the United States of America, including its territories and possessions (“United States”);

         

        B.       a
        partnership or corporation organized or incorporated under the laws of the United States;

         

        C.        an
        estate of which any executor or administrator is a U.S. Person;

         

        D.       a
        trust of which any trustee is a U.S. Person;

         

        E.       an
        agency or branch of a foreign entity located in the United States;

         

        F.       a
        non-discretionary account or similar account (other than an estate or trust) held by a dealer or other fiduciary for the
        benefit or account of a U.S. Person;

         

        G.       a
        discretionary account or similar account (other than an estate or trust) held by a dealer or other fiduciary organized,
        incorporated, or (if an individual) resident in the United States; or

         

        H.       a
        partnership or corporation: (i) organized or incorporated under the laws of any foreign jurisdiction; and (ii) formed
        by a U.S. Person principally for the purpose of investing in securities not registered under the Securities Act, unless
        it is organized or incorporated, and owned, by accredited investors (as defined in Rule 501(a) under the Securities Act)
        who are not natural persons, estates or trusts.

         

        And,
        in addition:

         

        I.         the
        investor was not offered the securities in the United States;

         

        J.         at
        the time the buy-order for the securities was originated, the investor was outside the United States; and

         

        K.        the
        investor is purchasing the securities for its own account and not on behalf of any U.S. Person (as defined in Regulation
        S) and a sale of the securities has not been pre-arranged with a purchaser in the United States.

 

 

    	19

    	 

    

 

EVENTURE
INTERACTIVE, INC.

Investor Profile

(Must be
completed by Investor)

 

Section
A - Personal Investor Information

	Investor Name(s):	 
	Individual executing Profile or Trustee:	 
	Social Security Numbers / Federal I.D.
    Number:	 
	Date of Birth:	 	 	 	Marital Status:	 	 
	Joint Party Date of Birth:	 	 	 	Investment Experience (Years):	 	 
	Annual Income:	 	 	 	Liquid Net Worth:	 	 
	Net Worth (excluding value of primary
    residence):	 
	Tax Bracket:	 	 	15% or below	 	 	25% - 27.5%	 	 	Over 27.5%
	 	 
	Home Street Address:	 
	Home City, State & Zip Code:	 
	Home Phone:	 	Home Fax:	 	Home Email:	 
	Employer:	 
	Employer Street Address:	 
	Employer City, State & Zip Code:	 
	Bus. Phone:	 	Bus. Fax:	 	Bus. Email:	 
	Type of Business:	 
	 
	If you are
    a United States citizen, please list the number and jurisdiction of issuance of any other government-issued
    document evidencing residence and bearing a photograph or similar safeguard (such as a driver’s license or passport),
    and provide a photocopy of each of the documents you have listed.
	 
	 

                                                 If you are NOT a United States citizen, for each jurisdiction of which you are a citizen or in which you work or reside, please list (i) your passport number and country of issuance or (ii) alien identification card number AND (iii) number and country of issuance of any other government-issued document evidencing nationality or residence and bearing a photograph or similar safeguard, and provide a photocopy of each of these documents you have listed.  These photocopies must be certified by a lawyer as to authenticity.  

	 
	 
	Section
    B – Certificate Delivery Instructions
	 
	 	 	Please deliver certificate to the Employer
    Address listed in Section A.
	 	 	Please deliver certificate to the Home
    Address listed in Section A.
	 	 	Please deliver certificate to the following
    address:	 
	 
	Section
    C – Form of Payment – Check or Wire Transfer
	 
	 	 	Check payable to Eventure Interactive,
    Inc.
	 	 	Wire
	 	 	 
	Please check if you are a FINRA member
    or affiliate of a FINRA member firm: ________
	 
	 	 	 
	Investor Signature	 	Date
	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 

 

    	20

    	 

    

 

ANTI MONEY
LAUNDERING REQUIREMENTS

 

The USA
PATRIOT Act

 

The USA PATRIOT
Act is designed to detect, deter, and punish terrorists in the United States and abroad. The Act imposes new anti-money laundering
requirements on brokerage firms and financial institutions. Since April 24, 2002 all brokerage firms have been required to have
new, comprehensive anti-money laundering programs.

 

To help you
understand these efforts, we want to provide you with some information about money laundering and our steps to implement the USA
PATRIOT Act.

 

What is
money laundering?

 

Money laundering
is the process of disguising illegally obtained money so that the funds appear to come from legitimate sources or activities.
Money laundering occurs in connection with a wide variety of crimes, including illegal arms sales, drug trafficking, robbery,
fraud, racketeering, and terrorism.

 

How big
is the problem and why is it important?

 

The use of
the U.S. financial system by criminals to facilitate terrorism or other crimes could well taint our financial markets. According
to the U.S. State Department, one recent estimate puts the amount of worldwide money laundering activity at $1 trillion a year.

 

What are
we required to do to eliminate money laundering?

 

Under rules
required by the USA PATRIOT Act, our anti-money laundering program must designate a special compliance officer, set up employee
training, conduct independent audits, and establish policies and procedures to detect and report suspicious transaction and ensure
compliance with such laws. As part of our required program, we may ask you to provide various identification documents or other
information. We will ask you for your name, address, date of birth and other information that will allow us to identify you. We
will ask to see a non-expired valid issued government identification, such as your driver’s license or other identifying
documents. Until you provide the information or documents we need, we may not be able to effect any transactions for you.

    	21

    	 

    

ANTI-MONEY
LAUNDERING INFORMATION FORM

The following
is required in accordance with the AML provision of the USA PATRIOT ACT.

 

(Please fill
out and return with requested documentation.)

 

	INVESTOR NAME:	 	 	 
	 	 	 
	LEGAL ADDRESS:	 	 	 
	 	 	 
	 	 	 	 
	 	 	 
	SSN# or TAX ID#	 	 
	 	 	 
	OF INVESTOR:	 	 	 
	 	 	 
	YEARLY INCOME: 	 	 	 
	 	 	 
	FOR INVESTORS WHO
    ARE INDIVIDUALS:  AGE: 	 	 
	 	 	 
	NET WORTH:  	 	 	*

 

		*	For
                                         purposes of calculating your net worth in this form, (a) your primary residence shall
                                         not be included as an asset; (b) indebtedness secured by your primary residence,
                                         up to the estimated fair market value of your primary residence at the time of your purchase
                                         of the securities, shall not be included as a liability (except that if the amount of
                                         such indebtedness outstanding at the time of your purchase of the securities exceeds
                                         the amount outstanding 60 days before such time, other than as a result of the acquisition
                                         of your primary residence, the amount of such excess shall be included as a liability);
                                         and (c) indebtedness that is secured by your primary residence in excess of the estimated
                                         fair market value of your primary residence at the time of your purchase of the securities
                                         shall be included as a liability.

 

FOR INVESTORS
WHO ARE INDIVIDUALS: OCCUPATION:  _______________________

 

ADDRESS
OF BUSINESS OR OF EMPLOYER:____________________________________

 

___________________________________________________________________________

 

FOR INVESTORS
WHO ARE ENTITIES:

 

YEARLY INCOME:
_______ NET WORTH:____________ 

 

TYPE OF
BUSINESS: ____________________________________

 

INVESTMENT
OBJECTIVE(S) (FOR ALL INVESTORS):  ___________________________

 

IDENTIFICATION
& DOCUMENTATION AND SOURCE OF FUNDS:

 

1.          Please
submit a copy of non-expired identification for the authorized signatory(ies) on the investment documents, showing name, date
of birth, address and signature. The address shown on the identification document MUST match the Investor’s address shown
on the Investor Signature Page.

	Current Driver’s License	or	Valid Passport	or	Identity
    Card

(Circle one
or more)

 

2.          If
the Investor is a corporation, limited liability company, trust or other type of entity, please submit the following requisite
documents: (i) Articles of Incorporation, By-Laws, Certificate of Formation, Operating Agreement, Trust or other similar documents
for the type of entity; and (ii) Corporate Resolution or power of attorney or other similar document granting authority to signatory(ies)
and designating that they are permitted to make the proposed investment.

 

3.          Please
advise where the funds were derived from to make the proposed investment:

	Investments	Savings	Proceeds of Sale	Other ____________

 

(Circle one
or more)

 

	Signature:
    	 	 
	 	 	 
	Print Name: 	 	 
	 	 	 
	Title (if applicable):
    	 	 
	 	 	 
	Date: 	 	 

 

    	22

Source: [{"source": "alea-institute/alea-institute/kl3m-data-edgar-agreements/train-00234-of-00352.parquet"}, [{"source": "alea-institute/alea-institute/kl3m-data-edgar-agreements/train-00234-of-00352.parquet"}]]