Transparent encryption in a content centric network

Information

  • Patent Grant
  • 10097521
  • Patent Number
    10,097,521
  • Date Filed
    Friday, November 20, 2015
    9 years ago
  • Date Issued
    Tuesday, October 9, 2018
    6 years ago
Abstract
One embodiment provides a system that facilitates efficient and transparent encryption of packets between a client computing device and a content producing device. During operation, the system receives, by a content producing device, an interest packet that includes a masked name which corresponds to an original name, wherein the original name is a hierarchically structured variable length identifier that includes contiguous name components ordered from a most general level to a most specific level. The system obtains the original name based on the masked name. The system computes a symmetric key based on the original name and a generated nonce. The system generates a content object packet that corresponds to the original name and includes the masked name, the nonce, and a payload encrypted based on the symmetric key, wherein the content object packet is received by a client computing device.
Description
RELATED APPLICATIONS

The subject matter of this application is related to the subject matter in the following applications:

    • U.S. patent application Ser. No. 13/847,814, entitled “ORDERED-ELEMENT NAMING FOR NAME-BASED PACKET FORWARDING,” by inventor Ignacio Solis, filed 20 Mar. 2013 (hereinafter “U.S. patent application Ser. No. 13/847,814”);
    • U.S. patent application Ser. No. 12/338,175, entitled “CONTROLLING THE SPREAD OF INTERESTS AND CONTENT IN A CONTENT CENTRIC NETWORK,” by inventors Van L. Jacobson and Diana K. Smetters, filed 18 Dec. 2008 (hereinafter “U.S. patent application Ser. No. 12/338,175”); and
    • U.S. patent application Ser. No. 14/746,490, entitled “TRANSPORT STACK NAME SCHEME AND IDENTITY MANAGEMENT,” by inventors Christopher A. Wood and Glenn C. Scott, filed 22 Jun. 2015 (hereinafter “U.S. patent application Ser. No. 14/746,490”);


      the disclosures of which are herein incorporated by reference in their entirety.


BACKGROUND

Field


This disclosure is generally related to distribution of digital content. More specifically, this disclosure is related to a system for efficient and transparent encryption of content in a content centric network.


Related Art


The proliferation of the Internet and e-commerce continues to create a vast amount of digital content. Content centric network (CCN) architectures have been designed to facilitate accessing and processing such digital content. A CCN includes entities, or nodes, such as network clients, forwarders (e.g., routers), and content producers, which communicate with each other by sending interest packets for various content items and receiving content object packets in return. CCN interests and content objects are identified by their unique names, which are typically hierarchically structured variable length identifiers (HSVLI). An HSVLI can include contiguous name components ordered from a most general level to a most specific level.


A CCN data packet (such as an interest or content object) is routed based on its name. Part of the CCN name can be used for routing purposes, and part of the name can contain sensitive data. For example, some name components may be used by an intermediate node to perform forwarding and caching, while other name components may contain private user information or application-specific data. In the latter case, the meaningfulness of the name components may reveal information regarding the requested content and may result in a breach of user privacy or security. In addition, CCN communication may require more than one round trip time (“RTT”) to exchange content and authentication or key exchange information. These issues can affect the security and efficiency of content distribution in a CCN.


SUMMARY

One embodiment provides a system that facilitates efficient and transparent encryption of packets between a client computing device and a content producing device. During operation, the system receives, by a content producing device, an interest packet that includes a masked name which corresponds to an original name, wherein the original name is a hierarchically structured variable length identifier that includes contiguous name components ordered from a most general level to a most specific level. The system obtains the original name based on the masked name. The system computes a symmetric key based on the original name and a generated nonce. The system generates a content object packet that corresponds to the original name and includes the masked name, the nonce, and a payload encrypted based on the symmetric key, wherein the content object packet is received by a client computing device.


In some embodiments, the system forwards the content object packet to an entity that sent the interest packet.


In some embodiments, the interest packet indicates the original name encrypted based on a public key of the content producing device. The system decrypts the encrypted original name based on a private key of the content producing device.


In some embodiments, the system looks up the masked name in a data structure to obtain the original name.


In some embodiments, the system generates the nonce, which is a random number that has a length of a predetermined size, wherein the symmetric key has a length of a same size as the predetermined size for the generated nonce.


In some embodiments, the method is performed by an application associated with the content producing device or by a component of a stack of communication modules associated with the content producing device.


In another embodiment, the system computes, by a client computing device, a masked name based on an original name, wherein the original name is a hierarchically structured variable length identifier that includes contiguous name components ordered from a most general level to a most specific level. In response to transmitting an interest packet with the masked name, the system receives a content object packet that includes the masked name, a nonce, and a payload encrypted based on a symmetric key, wherein the content object is generated by a content producing device. The system looks up the masked name in a data structure to obtain the original name. The system computes the symmetric key based on the obtained original name and the nonce, and decrypts the encrypted payload based on the symmetric key, thereby facilitating efficient and transparent content encryption between the client computing device and the content producing device.


In some embodiments, computing the masked name is further based on a hash function performed on one or more name components of the original name.


In some embodiments, the system sets the name for the interest packet to the masked name, and stores in a data structure a relation between the masked name and the original name.


In some embodiments, the system encrypts the original name based on a public key of a content producing device. The system includes the encrypted original name in a payload for the interest packet.


In some embodiments, computing the symmetric key is further based on a key derivation function indicated in the content object packet.


In some embodiments, the system replaces the masked name in the content object packet with the obtained original name, and replaces the encrypted payload in the content object packet with the decrypted payload. The system also removes from a pending interest table an entry corresponding to the obtained original name.





BRIEF DESCRIPTION OF THE FIGURES


FIG. 1 illustrates an exemplary environment which facilitates efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention.



FIG. 2 illustrates an exemplary transport framework which facilitates efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention.



FIG. 3 presents a flow chart illustrating a method by a client computing device for facilitating efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention.



FIG. 4 presents a flow chart illustrating a method by a content producing device for facilitating efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention.



FIG. 5 presents a flow chart illustrating a method by a client computing device for facilitating efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention.



FIG. 6A illustrates an exemplary apparatus that facilitates efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention.



FIG. 6B illustrates an exemplary apparatus that facilitates efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention.



FIG. 7A illustrates an exemplary computer system that facilitates efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention.



FIG. 7B illustrates an exemplary computer system that facilitates efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention.





In the figures, like reference numerals refer to the same figure elements.


DETAILED DESCRIPTION

The following description is presented to enable any person skilled in the art to make and use the embodiments, and is provided in the context of a particular application and its requirements. Various modifications to the disclosed embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other embodiments and applications without departing from the spirit and scope of the present disclosure. Thus, the present invention is not limited to the embodiments shown, but is to be accorded the widest scope consistent with the principles and features disclosed herein.


Overview


Embodiments of the present invention provide a system for efficient and transparent encryption of content which solves the problem of malicious access to the content by using a transparent encryption protocol that masks both the name and the content. In CCN, packets are routed based on a unique name for the packet. The CCN name may include application-sensitive data, which can be intercepted by a malicious network entity and result in a breach of user security or privacy. In addition, communication in a CCN between a consumer and a producer may require more than one RTT. For example, in response to an interest, a consumer may receive from a producer an encrypted content object. The consumer may then need to query the producer for key exchange information in order to decrypt the received content, which results in two RTTs.


Embodiments of the present invention provide a system based on a transparent encryption protocol which is both efficient and secure. The system reduces packet travel time to one RTT by masking the name and encrypting the responsive content. At a high level, a consumer creates an interest with an original name (“N”) and subsequently masks the name by, e.g., performing a hash function on one or more name components of the name (“H(N)”). The consumer stores the relation between N and H(N). The consumer can optionally encrypt N based on the public key of the producer and include the encrypted original name in the interest. Upon receiving the masked and optionally encrypted interest, the producer determines the original name based on the masked name by either looking up the masked name in a local database or, if the consumer included the encrypted original name in the interest, decrypting the original name based on a private key of the producer.


Subsequently, the producer generates a random nonce (“r”), and then generates a symmetric key (“SK”) based on a key derivation function (“KDF”) performed on the original name N concatenated with the nonce r: SK←KDF(N∥r). The producer then returns a content object with the masked name H(N), the nonce r, and a payload encrypted based on the symmetric key (“ESK(PAYLOAD)”).


Upon receiving the masked and encrypted responsive content object, the consumer looks up the masked name in its local database (as previously stored) to obtain the original name N, and, in possession of both the original name N and the nonce r, generates the symmetric key in the same manner as the producer: SK←KDF(N∥r). The KDF function name and parameters may be included in the content object. The consumer then uses the symmetric key to decrypt the encrypted payload: PAYLOAD←DSK(ESK(PAYLOAD)).


Thus, only an entity in possession of the original name, the mapping between the original name and the masked name, and the random nonce can generate the symmetric key to decrypt the encrypted payload of the responsive content object. The transparent encryption protocol of the present system thus enables lightweight end-to-end security by masking the name and encrypting the content. The consumer and the producer share a secret which is based on knowledge of the original name and the mapping of the original name to the masked name. In some embodiments, the encryption protocol is based on the functionality of components within and associated with a CCN transport framework, such as a masker component in a CCN transport stack. CCN transport stacks and CCN stack name and identity management are described in U.S. patent application Ser. No. 14/746,490. A detailed description of the transparent encryption protocol is described below in relation to FIG. 2.


In CCN, each piece of content is individually named, and each piece of data is bound to a unique name that distinguishes the data from any other piece of data, such as other versions of the same data or data from other sources. This unique name allows a network device to request the data by disseminating a request or an interest that indicates the unique name, and can obtain the data independent from the data's storage location, network location, application, and means of transportation. The following terms are used to describe the CCN architecture:


Content Object (or “content object”): A single piece of named data, which is bound to a unique name. Content Objects are “persistent,” which means that a Content Object can move around within a computing device, or across different computing devices, but does not change. If any component of the Content Object changes, the entity that made the change creates a new Content Object that includes the updated content, and binds the new Content Object to a new unique name.


Unique Names: A name in a CCN is typically location independent and uniquely identifies a Content Object. A data-forwarding device can use the name or name prefix to forward a packet toward a network node that generates or stores the Content Object, regardless of a network address or physical location for the Content Object. In some embodiments, the name may be a hierarchically structured variable-length identifier (HSVLI). The HSVLI can be divided into several hierarchical components, which can be structured in various ways. For example, the individual name components parc, home, ccn, and test.txt can be structured in a left-oriented prefix-major fashion to form the name “/parc/home/ccn/test.txt.” Thus, the name “/parc/home/ccn” can be a “parent” or “prefix” of “/parc/home/ccn/test.txt.” Additional components can be used to distinguish between different versions of the content item, such as a collaborative document.


In some embodiments, the name can include an identifier, such as a hash value that is derived from the Content Object's data (e.g., a checksum value) and/or from elements of the Content Object's name. A description of a hash-based name is described in U.S. patent application Ser. No. 13/847,814, which is herein incorporated by reference. A name can also be a flat label. Hereinafter, “name” is used to refer to any name for a piece of data in a name-data network, such as a hierarchical name or name prefix, a flat name, a fixed-length name, an arbitrary-length name, or a label (e.g., a Multiprotocol Label Switching (MPLS) label).


Interest (or “interest”): A packet that indicates a request for a piece of data, and includes a name (or a name prefix) for the piece of data. A data consumer can disseminate a request or Interest across an information-centric network, which CCN/NDN routers can propagate toward a storage device (e.g., a cache server) or a data producer that can provide the requested data to satisfy the request or Interest.


The methods disclosed herein are not limited to CCN networks and are applicable to other architectures as well. A description of a CCN architecture is described in U.S. patent application Ser. No. 12/338,175, which is herein incorporated by reference.


Exemplary Network and Communication



FIG. 1 illustrates an exemplary environment 100 which facilitates efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention. Computing environment 100 can include a computer network 102, such as a CCN. Environment 100 can also include a user 106 associated with a local computing device 104, and a remote computing device 108. Devices 104 and 108 can have internal transport stacks (e.g., associated with transport frameworks 130 and 170, respectively) that exchange network packets with each other over network 102.


In a traditional IP architecture, a forwarder is an IP-based forwarder that looks at the header of a packet to determine the source and the destination for the packet, and forwards the packet to the destination. The stack performs TCP/UDP, and an application interacts with the stack via a socket. In contrast, device 104 of the present invention does not use a conventional “stack.” Rather, device 104 via an application 110 can request a portal API instance corresponding to a portal 120 which corresponds to transport framework 130. Similarly, device 108 via an application 150 can request a portal API instance corresponding to a portal 160 which corresponds to transport framework 170.


Device 104 can include any computing device coupled to network 102, such as a smartphone 104.1, a tablet computer 104.2, and/or a server or personal computer 104.m. Specifically, device 104 can include application 110 which communicates via portal 120 with transport framework 130. Transport framework 130 can include stack components 134.1-134.n. Device 104 can also include forwarder 140 (e.g., a network interface card, or a router in a local area network) which can transfer packets between a stack (and individual stack components) of transport framework 130 and network 102. Similarly, device 108 can include any computing device coupled to network 102, such as a server or an end host device. Device 108 can include application 150 which communicates via portal 160 with transport framework 170. Transport framework 170 can include stack components 174.1-174.p. Device 108 can also include a forwarder 180 which can transfer packets between a stack (and individual stack components) of transport framework 170 and network 102. Forwarders 140 and 180 can also facilitate the transfer of packets directly between individual stack components 134.1-134.n and 174.1-174.p, respectively.



FIG. 2 illustrates an exemplary transport framework which facilitates efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention. Applications 210 and 250 can reside on the same device or on difference devices which communicate via a network 202. Application 210 can use APIs 212, 214, and 216 to communicate over network 202, and APIs 212-216 can interact via a portal 220 with a transport framework 230. Transport framework 230 can include one or more transport stacks which each include multiple stack components or communication modules. In FIG. 2, transport framework 230 depicts one transport stack (e.g., a transport stack 231) which includes stack components 232, 234, 235, 236, and 238. An API adapter 232 can communicate between an API and a specific transport stack and transport framework 230. A flow controller 234 can shape and manage traffic, pipeline and transmit interests, and order content objects. A masker 235 can create a masked name and perform functions related to transparent encryption, such as storing a mapping between an original name and a masked name, and computing a symmetric key for decrypting a payload. A verifier/signer 236 can encode and sign content objects destined for a network element, decode and verify content objects destined for the application, encode interests destined for a network element, and decode interests destined for the application. A forwarder/adapter 238 can communicate with a forwarder 240. Forwarder 240 can communicate with other forwarders over network 202. Other stack components (not shown) can include functionality related to security (e.g., encryption, decryption, authentication, data signing, signature verification, trust assessment, and filtering), data-processing (e.g., encoding, decoding, encapsulating, decapsulating, transcoding, compression, extraction, and decompression), and storage (e.g., data storage, data retrieval from storage, deduplication, segmentation, and versioning).


Similarly, application 250 can use APIs 252, 254, and 256 to communicate over network 202, and APIs 252-256 can interact via a portal 260 with a transport framework 270. Transport framework 270 can include one or more transport stacks which each include multiple stack components or communication modules. In FIG. 2, transport framework 270 depicts one transport stack (e.g., a transport stack 271) which includes the following stack components: an API adapter 272; a flow controller 274; a masker 275; a verifier/signer 276; and a forwarder/adapter 278 which can communicate with a forwarder 280. Forwarder 280 can communicate with forwarder 240 over network 202.


Application 210 can be associated with a consumer or a client computing device, and application 250 can be associated with a producer or a content producing device. During operation, application 210 can create an interest 290 with an original name (“N”) and an optional payload (“<data>”). Application 210 can send interest 290, via portal API instance 220, through stack 231. Masker 235 can receive interest 290 and compute the masked name (e.g., “H(N)”) (function 235.1) Masker 235 can store a mapping in a local database between N and H(N). In some embodiments, masker 235 can encrypt the original name with the public key of the producer, and insert the encrypted name into the payload of interest 290/292 (function 235.1), which can travel over network 202 via forwarders 240 and 280 (as shown by an interest 292).


Application 250 can receive interest 292 via forwarder 280 and transport stack 271. If the payload includes the encrypted original name, application 250 can decrypt the encrypted original name based on the private key of the producer. Alternatively, if the payload does not include the encrypted original name, application 250 (or one of the stack components) can perform a lookup in a local database for the masked name H(N) to obtain the original name N. In FIG. 2, determining N from H(N) is shown as a decryption operation performed by masker 275 in function 275.1, but this step can also be performed by application 250 or another stack component.


Subsequently, application 250 can generate a responsive content object 294 with the original name N and a payload of “Data.” Masker 275 then computes a symmetric key (“SK”) by performing a key derivation function (“KDF”) using as input the original name N concatenated with a random nonce (“r”). Masker 275 can generate the nonce r, which can be a random string with a length of a predetermined size. The symmetric key SK can also have a length of the same predetermined size: SKF←KDF(N∥r). Masker 275 can encrypt the payload using the symmetric key SK, replace the original name N with the masked name H(N), include the nonce r in a special field, and replace the cleartext payload with the encrypted payload (as shown in egress content object 296). The payload of content object 296 can include the specific function and other parameters needed to perform the key derivation function. The masked and encrypted content object 296 can travel over network 202 via forwarders 280 and 240.


Forwarder 240 can send content object 296 to transport stack 231. Masker 235 can look up H(N) in its local database with the previously stored mapping to obtain N (function 235.2). Because masker 235 possesses the KDF, the original name N, and the random nonce r, masker 235 can compute the symmetric key in similar fashion as masker 275: SKF←KDF(N∥r) (function 235.2). Masker 235 can then decrypt the encrypted payload to obtain “Data” and pass a decrypted, unmasked, and responsive content object 298 back up to application 210. In this way, only an entity that can derive the original name from the masked name can create the symmetric key to access the encrypted payload. Thus the present invention provides a lightweight end-to-end security for content distribution in a CCN.


Note that in FIG. 2, the interest packet created by application 210 and transmitted by forwarder 240 is depicted as two interests (290 and 292) for the sake of illustration. Similar, the responsive content object created by application 250 and transmitted by forwarder 280 is depicted as two content objects (294 and 296) for the sake of illustration.


Client Computing Device Generates a Masked Interest



FIG. 3 presents a flow chart 300 illustrating a method by a client computing device for facilitating efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention. During operation, an application associated with a client computing device generates an interest with an original name N (operation 302). A masker component associated with the client computing device computes a masked name based on the original name (operation 304). For example, the masker component can perform a hash function on the original name N to obtain the masked name H(N). The computation can be based on one or more name components of the original name, as in: H(N)=/H(nc1)/H(nc2), where “nc1” is the first name component of the original name and “nc2” is the second name component of the original name. The computation can also be based on any combination of name components, as in: H(N)=/H(nc1/nc2)/H(nc3), where “nc3” is the third name component of the original name. Furthermore, the masked name may contain some cleartext name components which are not masked, such as: H(N)=/google/H(nc1)/H(nc2).


The masker component stores in a local data structure a mapping of the original name N to the masked name H(N) (operation 306). The masker component can optionally encrypt the original name based on a public key (“PK”) of a content producing device (e.g., EPK(N)), and include or indicate the encrypted original name in the payload (operation 308, depicted with dashed lines). The masker component replaces the original name N with the masked name H(N) in the interest (operation 310). A forwarder associated with the client computing device forwards the interest with the masked name to the content producing device (operation 312).


Content Producing Device Returns a Masked and Encrypted Content Object



FIG. 4 presents a flow chart 400 illustrating a method by a content producing device for facilitating efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention. During operation, a forwarder associated with a content producing device (e.g., a producer) receives an interest with a masked name H(N) which is based on an original name N (operation 402). The interest may indicate in the payload the original name encrypted based on the public key of the producer. An application associated with the content producing device obtains the original name based on the masked name (operation 404). For example, if the interest indicates the encrypted original name, the application can decrypt the encrypted original name based on a private key of the producer. As another example, the content producing device may previously store a mapping between the original name and the masked name, e.g., in a local data structure. The content producing device can look up in its local data structure the masked name to obtain the original name.


The application generates a responsive content object with the original name N and an original payload (“PAYLOAD”) (operation 406). The content object includes content that corresponds to the original name N. A masker component associated with the content producing device generates a random nonce r (operation 408). The masker component computes a symmetric key SK by performing a key derivation function KDF based on the original name N and the generated nonce r: SK←KDF(N∥r) (operation 410). The nonce can be of lambda bits in length, and the computed symmetric key can also be lambda bits in length. The masker component encrypts the payload of the responsive object based on the symmetric key: Y←ESK(PAYLOAD) (operation 412). The masker component replaces the original name N with the masked name H(N), and further replaces the original payload PAYLOAD with the encrypted payload Y (operation 414). The masker component also includes the generated random nonce r in the responsive content object (operation 414). The nonce can be included in the payload or in the packet header or in a special or reserved field. Finally, a forwarder associated with the content producing device forwards the masked and encrypted content object to the appropriate client computing device (operation 416). The masked and encrypted content object is received by the client computing device which sent the interest.


Client Computing Device Processes a Masked and Encrypted Content Object



FIG. 5 presents a flow chart 500 illustrating a method by a client computing device for facilitating efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention. During operation, a forwarder associated with a client computing device receives a content object that includes a masked name H(N), a random nonce r, and a payload encrypted based on a symmetric key SK (e.g., Y←ESK(PAYLOAD)) (operation 502). Operation 502 may occur upon completion of operations 302-312 of FIG. 3. A masker component associated with the client computing device looks up the masked name H(N) in a local data structure to obtain the original name N (operation 504). The key derivation function KDF and any other required parameters can be included in the content object. The masker component computes the symmetric key SK based on the obtained original name N and the nonce r: SK←KDF(N∥r) (operation 506). The masker component decrypts the encrypted payload (e.g., Y←ESK(PAYLOAD)) based on the computed symmetric key: PAYLOAD←DSK(ESK(PAYLOAD)) (operation 508). The masker component replaces the masked name H(N) with the original name N, and replaces the encrypted payload Y with the decrypted payload PAYLOAD in the content object (operation 510). The masker component sends the unmasked and decrypted content object to an application associated with the client computing device (operation 512). The application receives the content object with the original name N and the decrypted content PAYLOAD, and processes the content object normally (operation 514). For example, the application can remove the entry corresponding to the fulfilled interest from a pending interest table.


Router Functionality


A CCN router can maintain a Forwarding Information Base (“FIB”), a Pending Interest Table (“PIT”), and a Content Store (“CS”), as described in U.S. patent application Ser. No. 13/847,814, which is herein incorporated by reference. The transparent encryption protocol of the present system does not impact the ability of a router to cache content in the CS, where the content is indexed by its name. Because a consumer can use a standard hash function to create the masked name H(N) from the original name N, other consumers requesting the same content can also create interests with the same masked name based on the standard hash function. Therefore, any consumer with knowledge of the original name N and the nonce r can decrypt the content for upper-layer applications. As described above, the symmetric encryption key SK is computed based on knowledge of the original name N. Because a router cannot reverse the one-way masking function (e.g., H(N)), only an entity with a priori knowledge of the original name N can decrypt the content. The entity with this knowledge is the consumer, which provides end-to-end security for content distributed in a CCN.


In addition, a producer may publish names and route prefixes in their masked form, either in a flat representation or as a sequence of hash digests based on the name structure. The PIT, CS, and FIB may be implemented using data structures like hash tables. Thus, the hash of a name is computed by the router, although the router may use more efficient hash functions such as CityHash or SipHash. In the present system, the consumer provides the hash a priori, which eases the computational burden of the routers (assuming that data structures like hash tables are used for implementing the PIT, CS, and FIB).


Exemplary Apparatuses and Computer Systems



FIG. 6A illustrates an exemplary apparatus that facilitates efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention. Apparatus 600 can comprise a plurality of modules which may communicate with one another via a wired or wireless communication channel. Apparatus 600 may be realized using one or more integrated circuits, and may include fewer or more modules than those shown in FIG. 6A. Further, apparatus 600 may be integrated in a computer system, or realized as a separate device which is capable of communicating with other computer systems and/or devices. Specifically, apparatus 600 can comprise a communication module 602, a name-determining module 604, a content-generating module 606, and a key-creating module 608.


In some embodiments, communication module 602 can send and/or receive data packets to/from other network nodes across a computer network, such as a content centric network. A data packet can include an interest packet or a content object packet with a masked name which correspond to an original name. Name-determining module 604 can obtain the original name based on the masked name. Key-creating module 608 can compute a symmetric key based on the original name and a generated nonce. Content-generating module 606 can generate a content object packet with content that corresponds to the original name and includes the masked name, the nonce, and a payload encrypted based on the symmetric key. Communication module 602 can forward the content object packet to an entity that sent the interest packet. Name-determining module 604 can decrypt the encrypted original name based on a private key of the content producing device. Name-determining module 604 can also look up the masked name in a data structure to obtain the original name. Key-creating module 608 can generate the nonce.



FIG. 6B illustrates an exemplary apparatus 650 that facilitates efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention. Apparatus 650 can comprise a plurality of modules which may communicate with one another via a wired or wireless communication channel. Apparatus 650 may be realized using one or more integrated circuits, and may include fewer or more modules than those shown in FIG. 6B. Further, apparatus 650 may be integrated in a computer system, or realized as a separate device which is capable of communicating with other computer systems and/or devices. Specifically, apparatus 650 can comprise a communication module 652, a name-determining module 654, a content-generating module 656, a key-creating module 658, and a content-processing module 660.


In some embodiments, communication module 652 can send and/or receive data packets to/from other network nodes across a computer network, such as a content centric network. A data packet can include an interest packet or a content object packet with a masked name which correspond to an original name. Name-masking module 656 can compute a masked name based on an original name. In response to transmitting an interest packet with the masked name, communication module 652 can receive a content object packet that includes the masked name, a nonce, and a payload encrypted based on a symmetric key. Name-determining module 654 can look up the masked name in a data structure to obtain the original name. Key-generating module 658 can compute the symmetric key based on the obtained original name and the nonce. Content-processing module 660 can decrypt the encrypted payload based on the symmetric key.


Content-processing module 660 can also set the name for the interest packet to the masked name and store in a data structure a relation between the masked name and the original name. Content-processing module 660 can further encrypt the original name based on a public key of a content producing device, and include the encrypted original name in a payload for the interest packet. Content-processing module 660 can replace the masked name in the content object packet with the obtained original name, replace the encrypted payload in the content object packet with the decrypted payload, and remove from a pending interest table an entry corresponding to the obtained original name.



FIG. 7A illustrates an exemplary computer system 702 that facilitates efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention. Computer system 702 includes a processor 704, a memory 706, and a storage device 708. Memory 706 can include a volatile memory (e.g., RAM) that serves as a managed memory, and can be used to store one or more memory pools. Furthermore, computer system 702 can be coupled to a display device 710, a keyboard 712, and a pointing device 714. Storage device 708 can store an operating system 716, a content-processing system 718, and data 728.


Content-processing system 718 can include instructions, which when executed by computer system 702, can cause computer system 702 to perform methods and/or processes described in this disclosure. Specifically, content-processing system 718 may include instructions for sending and/or receiving data packets to/from other network nodes across a computer network, such as a content centric network (communication module 720). A data packet can include an interest packet or a content object packet with a masked name which correspond to an original name. Further, content-processing system 718 can include instructions for obtaining the original name based on the masked name (name-determining module 722). Content-processing system 718 can include instructions for computing a symmetric key based on the original name and a generated nonce (key-creating module 726). Content-processing system 718 can also include instructions for generating a content object packet with content that corresponds to the original name and includes the masked name, the nonce, and a payload encrypted based on the symmetric key (content-generating module 724). Content-processing system 718 can include instructions for forwarding the content object packet to an entity that sent the interest packet (communication module 720).


Content-processing system 718 can additionally include instructions for decrypting the encrypted original name based on a private key of the content producing device (name-determining module 722). Content-processing system 718 can include instructions for looking up the masked name in a data structure to obtain the original name (name-determining module 722). Content-processing system 718 can also include instructions for generating the nonce (key-creating module 726).



FIG. 7B illustrates an exemplary computer system 752 that facilitates efficient and transparent encryption in a content centric network, in accordance with an embodiment of the present invention. Computer system 752 includes a processor 754, a memory 756, and a storage device 758. Memory 756 can include a volatile memory (e.g., RAM) that serves as a managed memory, and can be used to store one or more memory pools. Furthermore, computer system 752 can be coupled to a display device 760, a keyboard 762, and a pointing device 764. Storage device 758 can store an operating system 766, a content-processing system 768, and data 780.


Content-processing system 768 can include instructions, which when executed by computer system 752, can cause computer system 752 to perform methods and/or processes described in this disclosure. Specifically, content-processing system 768 may include instructions for sending and/or receiving data packets to/from other network nodes across a computer network, such as a content centric network (communication module 770). A data packet can include an interest packet or a content object packet with a masked name which correspond to an original name. Content-processing system 768 can include instructions for computing a masked name based on an original name (name-masking module 774). Content-processing system 768 can also include instructions for, in response to transmitting an interest packet with the masked name, receiving a content object packet that includes the masked name, a nonce, and a payload encrypted based on a symmetric key (communication module 770). Content-processing system 768 can include instructions for looking up the masked name in a data structure to obtain the original name (name-determining module 772). Content-processing system 768 can additionally include instructions for computing the symmetric key based on the obtained original name and the nonce (key-generating module 776). Content-processing system 768 can include instructions for decrypting the encrypted payload based on the symmetric key (content-processing module 778).


Furthermore, content-processing system 768 can include instructions for setting the name for the interest packet to the masked name and store in a data structure a relation between the masked name and the original name (content-processing module 778). Content-processing system 768 can also include instructions for encrypting the original name based on a public key of a content producing device, and including the encrypted original name in a payload for the interest packet (content-processing module 778). Content-processing system 768 can include instructions for replacing the masked name in the content object packet with the obtained original name, replacing the encrypted payload in the content object packet with the decrypted payload, and removing from a pending interest table an entry corresponding to the obtained original name (content-processing module 778).


Data 728 and data 780 can include any data that is required as input or that is generated as output by the methods and/or processes described in this disclosure. Specifically, data 728 and data 780 can store at least: a name; an original name that corresponds to a masked name; a name that is an HSVLI; a packet that corresponds to an interest, where the interest includes a masked name; a masked name that is computed based on a hash function performed on one or more name components; a transport framework; a protocol or transport stack; one or more components of a transport or protocol stack; a portal instance associated with a transport or protocol stack; a symmetric key; a nonce; a length or a size for the nonce; a key derivation function; a public key and/or a private key of a content producing device; a data structure that stores a relationship between an original name and a masked name; a packet that corresponds to a content object, where the content object includes a masked name and an encrypted payload; and a pending interest table.


The data structures and code described in this detailed description are typically stored on a computer-readable storage medium, which may be any device or medium that can store code and/or data for use by a computer system. The computer-readable storage medium includes, but is not limited to, volatile memory, non-volatile memory, magnetic and optical storage devices such as disk drives, magnetic tape, CDs (compact discs), DVDs (digital versatile discs or digital video discs), or other media capable of storing computer-readable media now known or later developed.


The methods and processes described in the detailed description section can be embodied as code and/or data, which can be stored in a computer-readable storage medium as described above. When a computer system reads and executes the code and/or data stored on the computer-readable storage medium, the computer system performs the methods and processes embodied as data structures and code and stored within the computer-readable storage medium.


Furthermore, the methods and processes described above can be included in hardware modules. For example, the hardware modules can include, but are not limited to, application-specific integrated circuit (ASIC) chips, field-programmable gate arrays (FPGAs), and other programmable-logic devices now known or later developed. When the hardware modules are activated, the hardware modules perform the methods and processes included within the hardware modules.


The foregoing descriptions of embodiments of the present invention have been presented for purposes of illustration and description only. They are not intended to be exhaustive or to limit the present invention to the forms disclosed. Accordingly, many modifications and variations will be apparent to practitioners skilled in the art. Additionally, the above disclosure is not intended to limit the present invention. The scope of the present invention is defined by the appended claims.

Claims
  • 1. A computer system for facilitating efficient and transparent encryption of packets, the system comprising: a processor; anda storage device storing instructions that when executed by the processor cause the processor to perform a method, the method comprising:receiving, by a content producing device, an interest packet that includes a masked name which corresponds to an original name of a content object, wherein the original name is a hierarchically structured variable length identifier, wherein said hierarchically structured variable length identifier represents a location of a specific content object within a file system and is used to identify the specific content object, and wherein the interest packet includes an encrypted original name of the content object in a payload of the interest packet, wherein the original name is encrypted based on a public key of the content producing device to generate the encrypted original name;obtaining the original name of the content object by decrypting the encrypted original name included in the payload of the interest packet based on a private key of the content producing device;computing a symmetric key based on both: (1) the original name of the content object, and (2) a generated nonce, wherein the generated nonce is a random string with a length of a predetermined size, and wherein the symmetric key has a length that is equal to the predetermined size of the generated nonce;generating a content object packet that corresponds to the original name and includes the masked name, the nonce, and a payload including the content object corresponding to the original name, wherein the payload is encrypted based on the symmetric key, wherein the content object packet is received by a client computing device, thereby facilitating efficient and transparent content encryption between the content producing device and the client computing device; andforwarding the content object packet to an entity that sent the interest packet.
  • 2. The computer system of claim 1, wherein the original name that corresponds to the masked name is stored in a data structure at the client computing device.
  • 3. The computer system of claim 1, wherein the method is performed by an application associated with the content producing device or by a component of a stack of communication modules associated with the content producing device.
  • 4. A computer system for facilitating efficient and transparent encryption of packets, the system comprising: a processor; anda storage device storing instructions that when executed by the processor cause the processor to perform a method, the method comprising:encrypting an original name of a content object based on a public key of a content producing device,wherein the original name of the content object is a hierarchically structured variable length identifier, wherein said hierarchically structured variable length identifier represents a location of a specific content object within a file system, and is used to identify a specific content object;computing, by a client computing device, a masked name based on the original name;including the encrypted original name of the content object in a payload for an interest packet;in response to transmitting the interest packet with the masked name, receiving a content object packet that includes the masked name, a nonce, and a payload including the content object corresponding to the original name, wherein the payload is encrypted based on a symmetric key, wherein the content object packet is generated by a content producing device;looking up the masked name from the content object packet in a data structure stored at the client computing device to obtain the original name;computing the symmetric key based on both: (1) the original name of the content object obtained based on the masked name, and (2) the nonce, wherein the nonce is a random string with a length of a predetermined size, and wherein the symmetric key has a length that is equal to the predetermined size of the nonce; anddecrypting the encrypted payload of the content object packet based on the symmetric key to obtain the content object corresponding to the original name, thereby facilitating efficient and transparent content encryption between the client computing device and the content producing device.
  • 5. The computer system of claim 4, wherein computing the masked name is further based on a hash function performed on one or more name components of the original name.
  • 6. The computer system of claim 4, wherein the method is performed by an application associated with the content producing device or by a component of a stack of communication modules associated with the client computing device.
  • 7. The computer system of claim 4, wherein the method further comprises: setting a name for the interest packet to the masked name; andstoring in a data structure stored at the client computing device a relation between the masked name and the original name.
  • 8. The computer system of claim 4, wherein computing the symmetric key is further based on a key derivation function indicated in the content object packet.
  • 9. The computer system of claim 4, wherein the method further comprises: replacing the masked name in the content object packet with the original name of the content object obtained based on the masked name;replacing the encrypted payload in the content object packet with the decrypted payload; andremoving from a pending interest table an entry corresponding to the original name of the content object obtained based on the masked name.
  • 10. A computer-implemented method for facilitating efficient and transparent encryption of packets, the method comprising: encrypting an original name of a content object to generate an encrypted original name, wherein the original name is encrypted based on a public key of a content producing device, wherein the original name is a hierarchically structured variable length identifier, wherein said hierarchically structured variable length identifier represents a location of a specific content object within a file system and is used to identify a specific content object;computing, by a client computing device, a masked name based on the original name;including the encrypted original name in a payload of an interest packet;in response to transmitting the interest packet with the masked name, receiving a content object packet that includes the masked name, a nonce, and a payload including the content object corresponding to the original name, wherein the payload is encrypted based on a symmetric key, wherein the content object packet is generated by a content producing device;looking up the masked name in a data structure stored at the client computing device to obtain the original name of the content object;computing the symmetric key based on both: (1) the original name of the content object obtained based on the masked name, and (2) the nonce, wherein the nonce is a random string with a length of a predetermined size, and wherein the symmetric key has a length that is equal to the predetermined size of the nonce; anddecrypting the encrypted payload of the content object packet based on the symmetric key to obtain the content object corresponding to the original name, thereby facilitating efficient and transparent content encryption between the client computing device and the content producing device.
  • 11. The method of claim 10, wherein computing the masked name is further based on a hash function performed on one or more name components of the original name.
  • 12. The method of claim 10, wherein the method is performed by an application associated with the content producing device or by a component of a stack of communication modules associated with the client computing device.
  • 13. The method of claim 10, further comprising: setting a name for the interest packet to the masked name; andstoring in a data structure stored at the client computing device a relation between the masked name and the original name.
  • 14. The method of claim 10, wherein computing the symmetric key is further based on a key derivation function indicated in the content object packet.
  • 15. The method of claim 10, further comprising: replacing the masked name in the content object packet with the original name of the content object obtained based on the masked name;replacing the encrypted payload in the content object packet with the decrypted payload; andremoving from a pending interest table an entry corresponding to the original name of the content object obtained based on the masked name.
  • 16. The computer system of claim 1, wherein the generated nonce is included in the payload of the content object packet.
  • 17. The computer system of claim 1, wherein the generated nonce is included in a packet header of the content object packet.
  • 18. The computer system of claim 4, wherein the nonce is included in the payload of the content object packet or a packet header of the content object packet.
US Referenced Citations (383)
Number Name Date Kind
817441 Niesz Apr 1906 A
4309569 Merkle Jan 1982 A
4921898 Lenney May 1990 A
5070134 Oyamada Dec 1991 A
5110856 Oyamada May 1992 A
5506844 Rao Apr 1996 A
5629370 Freidzon May 1997 A
5787431 Shaughnessy Jul 1998 A
5870605 Bracho Feb 1999 A
6052683 Irwin Apr 2000 A
6091724 Chandra Jul 2000 A
6173364 Zenchelsky Jan 2001 B1
6226618 Downs May 2001 B1
6233646 Hahm May 2001 B1
6332158 Risley Dec 2001 B1
6366988 Skiba Apr 2002 B1
6574377 Cahill Jun 2003 B1
6654792 Verma Nov 2003 B1
6667957 Corson Dec 2003 B1
6681220 Kaplan Jan 2004 B1
6681326 Son Jan 2004 B2
6769066 Botros Jul 2004 B1
6772333 Brendel Aug 2004 B1
6862280 Bertagna Mar 2005 B1
6901452 Bertagna May 2005 B1
6917985 Madruga Jul 2005 B2
6968393 Chen Nov 2005 B1
6981029 Menditto Dec 2005 B1
7013389 Srivastava Mar 2006 B1
7031308 Garcia-Luna-Aceves Apr 2006 B2
7061877 Gummalla Jun 2006 B1
7206860 Murakami Apr 2007 B2
7257837 Xu Aug 2007 B2
7287275 Moskowitz Oct 2007 B2
7315541 Housel Jan 2008 B1
7339929 Zelig Mar 2008 B2
7350229 Lander Mar 2008 B1
7382787 Barnes Jun 2008 B1
7444251 Nikovski Oct 2008 B2
7466703 Arunachalam Dec 2008 B1
7472422 Agbabian Dec 2008 B1
7496668 Hawkinson Feb 2009 B2
7509425 Rosenberg Mar 2009 B1
7523016 Surdulescu Apr 2009 B1
7543064 Juncker Jun 2009 B2
7552233 Raju Jun 2009 B2
7555482 Korkus Jun 2009 B2
7555563 Ott Jun 2009 B2
7567547 Mosko Jul 2009 B2
7567946 Andreoli Jul 2009 B2
7580971 Gollapudi Aug 2009 B1
7623535 Guichard Nov 2009 B2
7647507 Feng Jan 2010 B1
7660324 Oguchi Feb 2010 B2
7685290 Satapati Mar 2010 B2
7698463 Ogier Apr 2010 B2
7769887 Bhattacharyya Aug 2010 B1
7779467 Choi Aug 2010 B2
7801177 Luss Sep 2010 B2
7816441 Elizalde Oct 2010 B2
7831733 Sultan Nov 2010 B2
7908337 Garcia-Luna-Aceves Mar 2011 B2
7924837 Shabtay Apr 2011 B1
7953885 Devireddy May 2011 B1
8000267 Solis Aug 2011 B2
8010691 Kollmansberger Aug 2011 B2
8074289 Carpentier Dec 2011 B1
8117441 Kurien Feb 2012 B2
8160069 Jacobson Apr 2012 B2
8204060 Jacobson Jun 2012 B2
8214364 Bigus Jul 2012 B2
8224985 Takeda Jul 2012 B2
8225057 Zheng Jul 2012 B1
8271578 Sheffi Sep 2012 B2
8312064 Gauvin Nov 2012 B1
8386622 Jacobson Feb 2013 B2
8467297 Liu Jun 2013 B2
8553562 Allan Oct 2013 B2
8572214 Garcia-Luna-Aceves Oct 2013 B2
8654649 Vasseur Feb 2014 B2
8665757 Kling Mar 2014 B2
8667172 Ravindran Mar 2014 B2
8688619 Ezick Apr 2014 B1
8699350 Kumar Apr 2014 B1
8750820 Allan Jun 2014 B2
8761022 Chiabaut Jun 2014 B2
8762477 Xie Jun 2014 B2
8762570 Qian Jun 2014 B2
8762707 Killian Jun 2014 B2
8767627 Ezure Jul 2014 B2
8817594 Gero Aug 2014 B2
8826381 Kim Sep 2014 B2
8832302 Bradford Sep 2014 B1
8836536 Marwah Sep 2014 B2
8862774 Vasseur Oct 2014 B2
8903756 Zhao Dec 2014 B2
8937865 Kumar Jan 2015 B1
9071498 Beser Jun 2015 B2
9112895 Lin Aug 2015 B1
20020010795 Brown Jan 2002 A1
20020048269 Hong Apr 2002 A1
20020054593 Morohashi May 2002 A1
20020077988 Sasaki Jun 2002 A1
20020078066 Robinson Jun 2002 A1
20020138551 Erickson Sep 2002 A1
20020176404 Girard Nov 2002 A1
20020188605 Adya Dec 2002 A1
20020199014 Yang Dec 2002 A1
20030046437 Eytchison Mar 2003 A1
20030048793 Pochon Mar 2003 A1
20030051100 Patel Mar 2003 A1
20030074472 Lucco Apr 2003 A1
20030097447 Johnston May 2003 A1
20030140257 Peterka Jul 2003 A1
20040024879 Dingman Feb 2004 A1
20040030602 Rosenquist Feb 2004 A1
20040073715 Folkes Apr 2004 A1
20040139230 Kim Jul 2004 A1
20040221047 Grover Nov 2004 A1
20040225627 Botros Nov 2004 A1
20040252683 Kennedy Dec 2004 A1
20050003832 Osafune Jan 2005 A1
20050028156 Hammond Feb 2005 A1
20050043060 Brandenberg Feb 2005 A1
20050050211 Kaul Mar 2005 A1
20050074001 Mattes Apr 2005 A1
20050149508 Deshpande Jul 2005 A1
20050159823 Hayes Jul 2005 A1
20050198351 Nog Sep 2005 A1
20050249196 Ansari Nov 2005 A1
20050259637 Chu Nov 2005 A1
20050262217 Nonaka Nov 2005 A1
20050289222 Sahim Dec 2005 A1
20060010249 Sabesan Jan 2006 A1
20060029102 Abe Feb 2006 A1
20060039379 Abe Feb 2006 A1
20060051055 Ohkawa Mar 2006 A1
20060072523 Richardson Apr 2006 A1
20060099973 Nair May 2006 A1
20060129514 Watanabe Jun 2006 A1
20060133343 Huang Jun 2006 A1
20060173831 Basso Aug 2006 A1
20060193295 White Aug 2006 A1
20060206445 Andreoli Sep 2006 A1
20060215684 Capone Sep 2006 A1
20060223504 Ishak Oct 2006 A1
20060256767 Suzuki Nov 2006 A1
20060268792 Belcea Nov 2006 A1
20070019619 Foster Jan 2007 A1
20070073888 Madhok Mar 2007 A1
20070094265 Korkus Apr 2007 A1
20070112880 Yang May 2007 A1
20070124412 Narayanaswami May 2007 A1
20070127457 Mirtorabi Jun 2007 A1
20070160062 Morishita Jul 2007 A1
20070162394 Zager Jul 2007 A1
20070189284 Kecskemeti Aug 2007 A1
20070195765 Heissenbuttel Aug 2007 A1
20070204011 Shaver Aug 2007 A1
20070209067 Fogel Sep 2007 A1
20070239892 Ott Oct 2007 A1
20070240207 Belakhdar Oct 2007 A1
20070245034 Retana Oct 2007 A1
20070253418 Shiri Nov 2007 A1
20070255699 Sreenivas Nov 2007 A1
20070255781 Li Nov 2007 A1
20070274504 Maes Nov 2007 A1
20070276907 Maes Nov 2007 A1
20070294187 Scherrer Dec 2007 A1
20080005056 Stelzig Jan 2008 A1
20080010366 Duggan Jan 2008 A1
20080037420 Tang Feb 2008 A1
20080043989 Furutono Feb 2008 A1
20080046340 Brown Feb 2008 A1
20080059631 Bergstrom Mar 2008 A1
20080080440 Yarvis Apr 2008 A1
20080101357 Iovanna May 2008 A1
20080107034 Jetcheva May 2008 A1
20080123862 Rowley May 2008 A1
20080133583 Artan Jun 2008 A1
20080133755 Pollack Jun 2008 A1
20080151755 Nishioka Jun 2008 A1
20080159271 Kutt Jul 2008 A1
20080186901 Itagaki Aug 2008 A1
20080200153 Fitzpatrick Aug 2008 A1
20080215669 Gaddy Sep 2008 A1
20080216086 Tanaka Sep 2008 A1
20080243992 Jardetzky Oct 2008 A1
20080256359 Kahn Oct 2008 A1
20080270618 Rosenberg Oct 2008 A1
20080271143 Stephens Oct 2008 A1
20080287142 Keighran Nov 2008 A1
20080288580 Wang Nov 2008 A1
20080320148 Capuozzo Dec 2008 A1
20090006659 Collins Jan 2009 A1
20090013324 Gobara Jan 2009 A1
20090022154 Kiribe Jan 2009 A1
20090024641 Quigley Jan 2009 A1
20090030978 Johnson Jan 2009 A1
20090037763 Adhya Feb 2009 A1
20090052660 Chen Feb 2009 A1
20090067429 Nagai Mar 2009 A1
20090077184 Brewer Mar 2009 A1
20090092043 Lapuh Apr 2009 A1
20090097631 Gisby Apr 2009 A1
20090103515 Pointer Apr 2009 A1
20090113068 Fujihira Apr 2009 A1
20090144300 Chatley Jun 2009 A1
20090157887 Froment Jun 2009 A1
20090185677 Bugbee Jul 2009 A1
20090185745 Momosaki Jul 2009 A1
20090193101 Munetsugu Jul 2009 A1
20090222344 Greene Sep 2009 A1
20090228593 Takeda Sep 2009 A1
20090254572 Redlich Oct 2009 A1
20090268905 Matsushima Oct 2009 A1
20090285209 Stewart Nov 2009 A1
20090287835 Jacobson Nov 2009 A1
20090288163 Jacobson Nov 2009 A1
20090292743 Bigus Nov 2009 A1
20090293121 Bigus Nov 2009 A1
20090300079 Shitomi Dec 2009 A1
20090300407 Kamath Dec 2009 A1
20090307333 Welingkar Dec 2009 A1
20090323632 Nix Dec 2009 A1
20100005061 Basco Jan 2010 A1
20100027539 Beverly Feb 2010 A1
20100046546 Ram Feb 2010 A1
20100057929 Merat Mar 2010 A1
20100088370 Wu Apr 2010 A1
20100094767 Miltonberger Apr 2010 A1
20100098093 Ejzak Apr 2010 A1
20100100465 Cooke Apr 2010 A1
20100103870 Garcia-Luna-Aceves Apr 2010 A1
20100124191 Vos May 2010 A1
20100125911 Bhaskaran May 2010 A1
20100131660 Dec May 2010 A1
20100150155 Napierala Jun 2010 A1
20100165976 Khan Jul 2010 A1
20100169478 Saha Jul 2010 A1
20100169503 Kollmansberger Jul 2010 A1
20100180332 Ben-Yochanan Jul 2010 A1
20100182995 Hwang Jul 2010 A1
20100185753 Liu Jul 2010 A1
20100195653 Jacobson Aug 2010 A1
20100195654 Jacobson Aug 2010 A1
20100195655 Jacobson Aug 2010 A1
20100217874 Anantharaman Aug 2010 A1
20100232402 Przybysz Sep 2010 A1
20100232439 Dham Sep 2010 A1
20100235516 Nakamura Sep 2010 A1
20100246549 Zhang Sep 2010 A1
20100250497 Redlich Sep 2010 A1
20100250939 Adams Sep 2010 A1
20100268782 Zombek Oct 2010 A1
20100272107 Papp Oct 2010 A1
20100284309 Allan Nov 2010 A1
20100284404 Gopinath Nov 2010 A1
20100293293 Beser Nov 2010 A1
20100322249 Thathapudi Dec 2010 A1
20110013637 Xue Jan 2011 A1
20110022812 vanderLinden Jan 2011 A1
20110055392 Shen Mar 2011 A1
20110055921 Narayanaswamy Mar 2011 A1
20110090908 Jacobson Apr 2011 A1
20110106755 Hao May 2011 A1
20110145597 Yamaguchi Jun 2011 A1
20110145858 Philpott Jun 2011 A1
20110153840 Narayana Jun 2011 A1
20110161408 Kim Jun 2011 A1
20110202609 Chaturvedi Aug 2011 A1
20110231578 Nagappan Sep 2011 A1
20110239256 Gholmieh Sep 2011 A1
20110258049 Ramer Oct 2011 A1
20110264824 Venkata Subramanian Oct 2011 A1
20110265174 Thornton Oct 2011 A1
20110271007 Wang Nov 2011 A1
20110286457 Ee Nov 2011 A1
20110286459 Rembarz Nov 2011 A1
20110295783 Zhao Dec 2011 A1
20110299454 Krishnaswamy Dec 2011 A1
20120011170 Elad Jan 2012 A1
20120011551 Levy Jan 2012 A1
20120036180 Thornton Feb 2012 A1
20120047223 Tarkoma Feb 2012 A1
20120047361 Erdmann Feb 2012 A1
20120066727 Nozoe Mar 2012 A1
20120106339 Mishra May 2012 A1
20120114313 Phillips May 2012 A1
20120120803 Farkas May 2012 A1
20120136676 Goodall May 2012 A1
20120136936 Quintuna May 2012 A1
20120136945 Lee May 2012 A1
20120137367 Dupont May 2012 A1
20120141093 Yamaguchi Jun 2012 A1
20120155464 Kim Jun 2012 A1
20120158973 Jacobson Jun 2012 A1
20120163373 Lo Jun 2012 A1
20120179653 Araki Jul 2012 A1
20120197690 Agulnek Aug 2012 A1
20120198048 Ioffe Aug 2012 A1
20120221150 Arensmeier Aug 2012 A1
20120224487 Hui Sep 2012 A1
20120257500 Lynch Oct 2012 A1
20120284791 Miller Nov 2012 A1
20120290669 Parks Nov 2012 A1
20120290919 Melnyk Nov 2012 A1
20120291102 Cohen Nov 2012 A1
20120314580 Hong Dec 2012 A1
20120317307 Ravindran Dec 2012 A1
20120331112 Chatani Dec 2012 A1
20130041982 Shi Feb 2013 A1
20130051392 Filsfils Feb 2013 A1
20130060962 Wang Mar 2013 A1
20130073552 Rangwala Mar 2013 A1
20130074155 Huh Mar 2013 A1
20130091539 Khurana Apr 2013 A1
20130110987 Kim May 2013 A1
20130111063 Lee May 2013 A1
20130151584 Westphal Jun 2013 A1
20130163426 Beliveau Jun 2013 A1
20130166668 Byun Jun 2013 A1
20130173822 Hong Jul 2013 A1
20130182568 Lee Jul 2013 A1
20130185406 Choi Jul 2013 A1
20130197698 Shah Aug 2013 A1
20130198119 Eberhardt, III Aug 2013 A1
20130219038 Lee Aug 2013 A1
20130219081 Qian Aug 2013 A1
20130219478 Mahamuni Aug 2013 A1
20130223237 Hui Aug 2013 A1
20130227166 Ravindran Aug 2013 A1
20130242996 Varvello Sep 2013 A1
20130250809 Hui Sep 2013 A1
20130282854 Jang Oct 2013 A1
20130282860 Zhang Oct 2013 A1
20130282920 Zhang Oct 2013 A1
20130304937 Lee Nov 2013 A1
20130329696 Xu Dec 2013 A1
20130336323 Srinivasan Dec 2013 A1
20130343408 Cook Dec 2013 A1
20140003232 Guichard Jan 2014 A1
20140006565 Muscariello Jan 2014 A1
20140029445 Hui Jan 2014 A1
20140032714 Liu Jan 2014 A1
20140040505 Barton Feb 2014 A1
20140074730 Arensmeier Mar 2014 A1
20140075567 Raleigh Mar 2014 A1
20140082135 Jung Mar 2014 A1
20140089454 Jeon Mar 2014 A1
20140096249 Dupont Apr 2014 A1
20140129736 Yu May 2014 A1
20140136814 Stark May 2014 A1
20140140348 Perlman May 2014 A1
20140143370 Vilenski May 2014 A1
20140146819 Bae May 2014 A1
20140149733 Kim May 2014 A1
20140156396 deKozan Jun 2014 A1
20140165207 Engel Jun 2014 A1
20140172783 Suzuki Jun 2014 A1
20140172981 Kim Jun 2014 A1
20140173034 Liu Jun 2014 A1
20140192717 Liu Jul 2014 A1
20140195328 Ferens Jul 2014 A1
20140195666 Dumitriu Jul 2014 A1
20140233575 Xie Aug 2014 A1
20140237085 Park Aug 2014 A1
20140280823 Varvello Sep 2014 A1
20140281489 Peterka Sep 2014 A1
20140281505 Zhang Sep 2014 A1
20140282816 Xie Sep 2014 A1
20140289325 Solis Sep 2014 A1
20140289790 Wilson Sep 2014 A1
20140314093 You Oct 2014 A1
20140365550 Jang Dec 2014 A1
20150006896 Franck Jan 2015 A1
20150018770 Baran Jan 2015 A1
20150032892 Narayanan Jan 2015 A1
20150063802 Bahadur Mar 2015 A1
20150095481 Ohnishi Apr 2015 A1
20150095514 Yu Apr 2015 A1
20150188770 Naiksatam Jul 2015 A1
20150207633 Ravindran Jul 2015 A1
Foreign Referenced Citations (17)
Number Date Country
1720277 Jun 1967 DE
19620817 Nov 1997 DE
0295727 Dec 1988 EP
0757065 Jul 1996 EP
1077422 Feb 2001 EP
1384729 Jan 2004 EP
2124415 Nov 2009 EP
2214357 Aug 2010 EP
2905924 Aug 2015 EP
2905933 Aug 2015 EP
03005288 Jan 2003 WO
03042254 May 2003 WO
03049369 Jun 2003 WO
03091297 Nov 2003 WO
2007113180 Oct 2007 WO
2007144388 Dec 2007 WO
2011049890 Apr 2011 WO
Non-Patent Literature Citations (151)
Entry
B. Ahlgren et al., ‘A Survey of Information-centric Networking’ IEEE Commun. Magazine, Jul. 2012, pp. 26-36.
Content Centric Networking Project (CCN) [online], http://ccnx.org/releases/latest/doc/technical/, Downloaded Mar. 9, 2015.
Content Mediator Architecture for Content-aware Networks (COMET) Project [online], http://www.comet-project.org/, Downloaded Mar. 9, 2015.
Detti, Andrea, et al. “CONET: a content centric inter-networking architecture.” Proceedings of the ACM SIGCOMM workshop on Information-centric networking. ACM, 2011.
Gupta, Anjali, Barbara Liskov, and Rodrigo Rodrigues. “Efficient Routing for Peer-to-Peer Overlays.” NSDI. vol. 4. 2004.
Hoque et al., ‘NLSR: Named-data Link State Routing Protocol’, Aug. 12, 2013, ICN 2013, pp. 15-20.
V. Jacobson et al., ‘Networking Named Content,’ Proc. IEEE CoNEXT '09, Dec. 2009.
L. Wang et al., ‘OSPFN: An OSPF Based Routing Protocol for Named Data Networking,’ Technical Report NDN-0003, 2012.
NDN Project [online], http://www.named-data.net/, Downloaded Mar. 9, 2015.
“Pursuing a pub/sub internet (PURSUIT),” http://www.fp7-pursuit.ew/PursuitWeb/. downloaded Mar. 11, 2015.
Scalable and Adaptive Internet Solutions (SAIL) Project [online], http://sail-project.eu/ Downloaded Mar. 9, 2015.
Xylomenos, George, et al. “A survey of information-centric networking research.” Communications Surveys & Tutorials, IEEE 16.2 (2014): 1024-1049.
Jacobson, Van et al., “Content-Centric Networking, Whitepaper Describing Future Assurable Global Networks”, Palo Alto Research Center, Inc., Jan. 30, 2007, pp. 1-9.
Koponen, Teemu et al., “A Data-Oriented (and Beyond) Network Architecture”, SIGCOMM '07, Aug. 27-31, 2007, Kyoto, Japan, XP-002579021, p. 181-192.
Fall, K. et al., “DTN: an architectural retrospective”, Selected areas in communications, IEEE Journal on, vol. 28, No. 5, Jun. 1, 2008, pp. 828-835.
Gritter, M. et al., ‘An Architecture for content routing support in the Internet’, Proceedings of 3rd Usenix Symposium on Internet Technologies and Systems, 2001, pp. 37-48.
“CCNx,” http://ccnx.org/. downloaded Mar. 11, 2015.
“Content Delivery Network”, Wikipedia, Dec. 10, 2011, http://en.wikipedia.org/w/index.php?title=Content_delivery_network&oldid=465077460.
“Digital Signature” archived on Aug. 31, 2009 at http://web.archive.org/web/20090831170721/http://en.wikipedia.org/wiki/Digital_signature.
“Introducing JSON,” http://www.json.org/. downloaded Mar. 11, 2015.
“Microsoft PlayReady,” http://www.microsoft.com/playready/.downloaded Mar. 11, 2015.
“The FP7 4WARD project,” http://www.4ward-project.eu/. downloaded Mar. 11, 2015.
A. Broder and A. Karlin, “Multilevel Adaptive Hashing”, Jan. 1990, pp. 43-53.
A. Wolman, M. Voelker, N. Sharma N. Cardwell, A. Karlin, and H.M. Levy, “On the scale and performance of cooperative web proxy caching,” ACM SIGHOPS Operating Systems Review, vol. 33, No. 5, pp. 16-31, Dec. 1999.
Afanasyev, Alexander, et al. “Interest flooding attack and countermeasures in Named Data Networking.” IFIP Networking Conference, 2013. IEEE, 2013.
Ao-Jan Su, David R. Choffnes, Aleksandar Kuzmanovic, and Fabian E. Bustamante. Drafting Behind Akamai: Inferring Network Conditions Based on CDN Redirections. IEEE/ACM Transactions on Networking {Feb. 2009).
“PBC Library-Pairing-Based Cryptography-About,” http://crypto.stanford.edu/pbc. downloaded Apr. 27, 2015.
Bari, MdFaizul, et al. ‘A survey of naming and routing in information-centric networks.’ Communications Magazine, IEEE 50.12 (2012): 44-53.
Baugher, Mark et al., “Self-Verifying Names for Read-Only Named Data”, 2012 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), Mar. 2012, pp. 274-279.
Brambley, Michael, A novel, low-cost, reduced-sensor approach for providing smart remote monitoring and diagnostics for packaged air conditioners and heat pumps. Pacific Northwest National Laboratory, 2009.
C. Gentry and A. Silverberg. Hierarchical ID-Based Cryptography. Advances in Cryptology—ASIACRYPT 2002. Springer Berlin Heidelberg (2002).
C.A. Wood and E. Uzun, “Flexible end-to-end content security in CCN,” in Proc. IEEE CCNC 2014, Las Vegas, CA, USA, Jan. 2014.
Carzaniga, Antonio, Matthew J. Rutherford, and Alexander L. Wolf. ‘A routing scheme for content-based networking.’ INFOCOM 2004. Twenty-third Annual Joint Conference of the IEEE Computer and Communications Societies. vol. 2. IEEE, 2004.
Cho, Jin-Hee, Ananthram Swami, and Ray Chen. “A survey on trust management for mobile ad hoc networks.” Communications Surveys & Tutorials, IEEE 13.4 (2011): 562-583.
Compagno, Alberto, et al. “Poseidon: Mitigating interest flooding DDoS attacks in named data networking.” Local Computer Networks (LCN), 2013 IEEE 38th Conference on. IEEE, 2013.
Conner, William, et al. “A trust management framework for service-oriented environments.” Proceedings of the 18th international conference on World wide web. ACM, 2009.
Boneh et al., “Collusion Resistant Broadcast Encryption With Short Ciphertexts and Private Keys”, 2005.
D. Boneh and M. Franklin. Identity-Based Encryption from the Weil Pairing. Advances in Cryptology—CRYPTO 2001, vol. 2139, Springer Berlin Heidelberg (2001).
D.K. Smetters, P. Golle, and J.D. Thornton, “CCNx access control specifications,” Parc, Tech. Rep., Jul. 2010.
Dabirmoghaddam, Ali, Maziar Mirzazad Barijough, and J. J. Garcia-Luna-Aceves. ‘Understanding optimal caching and opportunistic caching at the edge of information-centric networks.’ Proceedings of the 1st international conference on Information-centric networking. ACM, 2014.
Detti et al., “Supporting the Web with an information centric network that routes by name”, Aug. 2012, Computer Networks 56, pp. 3705-3702.
Dijkstra, Edsger W., and Carel S. Scholten. ‘Termination detection for diffusing computations.’ Information Processing Letters 11.1 (1980): 1-4.
Dijkstra, Edsger W., Wim Hj Feijen, and A_J M. Van Gasteren. “Derivation of a termination detection algorithm for distributed computations.” Control Flow and Data Flow: concepts of distributed programming. Springer Berlin Heidelberg, 1986. 507-512.
E. Rescorla and N. Modadugu, “Datagram transport layer security,” IETF RFC 4347, Apr. 2006.
E.W. Dijkstra, W. Feijen, and A.J.M. Van Gasteren, “Derivation of a Termination Detection Algorithm for Distributed Computations,” Information Processing Letter, vol. 16, No. 5, 1983.
Fayazbakhsh, S. K., Lin, Y., Tootoonchian, A., Ghodsi, A., Koponen, T., Maggs, B., & Shenker, S. {Aug. 2013). Less pain, most of the gain: Incrementally deployable ICN. In ACM SIGCOMM Computer Communication Review (vol. 43, No. 4, pp. 147-158). ACM.
Anteniese et al., “Improved Proxy Re-Encryption Schemes with Applications to Secure Distributed Storage”, 2006.
G. Tyson, S. Kaune, S. Miles, Y. El-Khatib, A. Mauthe, and A. Taweel, “A trace-driven analysis of caching in content-centric networks,” in Proc. IEEE ICCCN 2012, Munich, Germany, Jul.-Aug. 2012, pp. 1-7.
G. Wang, Q. Liu, and J. Wu, “Hierarchical attribute-based encryption for fine-grained access control in cloud storage services,” in Proc. ACM CCS 2010, Chicago, IL, USA, Oct. 2010, pp. 735-737.
G. Xylomenos et al., “A Survey of Information-centric Networking Research,” IEEE Communication Surveys and Tutorials, Jul. 2013.
Garcia, Humberto E., Wen-Chiao Lin, and Semyon M. Meerkov. “A resilient condition assessment monitoring system.” Resilient Control Systems (ISRCS), 2012 5th International Symposium on. IEEE, 2012.
Garcia-Luna-Aceves, Jose J. ‘A unified approach to loop-free routing using distance vectors or link states.’ ACM SIGCOMM Computer Communication Review. vol. 19. No. 4. ACM, 1989.
Garcia-Luna-Aceves, Jose J. ‘Name-Based Content Routing in Information Centric Networks Using Distance Information’ Proc ACM ICN 2014, Sep. 2014.
Ghali, Cesar, GeneTsudik, and Ersin Uzun. “Needle in a Haystack: Mitigating Content Poisoning in Named-Data Networking.” Proceedings of NDSS Workshop on Security of Emerging Networking Technologies (SENT). 2014.
Ghodsi, Ali, et al. “Information-centric networking: seeing the forest for the trees.” Proceedings of the 10th ACM Workshop on Hot Topics in Networks. ACM, 2011.
Ghodsi, Ali, et al. “Naming in content-oriented architectures.” Proceedings of the ACM SIGCOMM workshop on Information-centric networking. ACM, 2011.
Xiong et al., “CloudSeal: End-to-End Content Protection in Cloud-based Storage and Delivery Services”, 2012.
Heckerman, David, John S. Breese, and Koos Rommelse. “Decision-Theoretic Troubleshooting.” Communications of the ACM. 1995.
Heinemeier, Kristin, et al. “Uncertainties in Achieving Energy Savings from HVAC Maintenance Measures in the Field.” ASHRAE Transactions 118.Part 2 {2012).
Herlich, Matthias et al., “Optimizing Energy Efficiency for Bulk Transfer Networks”, Apr. 13, 2010, pp. 1-3, retrieved for the Internet: URL:http://www.cs.uni-paderborn.de/fileadmin/informationik/ag-karl/publications/miscellaneous/optimizing.pdf (retrieved on Mar. 9, 2012).
I. Psaras, R.G. Clegg, R. Landa, W.K. Chai, and G. Pavlou, “Modelling and evaluation of CCN-caching trees,” in Proc. IFIP Networking 2011, Valencia, Spain, May 2011, pp. 78-91.
Intanagonwiwat, Chalermek, Ramesh Govindan, and Deborah Estrin. ‘Directed diffusion: a scalable and robust communication paradigm for sensor networks.’ Proceedings of the 6th annual international conference on Mobile computing and networking. ACM, 2000.
J. Aumasson and D. Bernstein, “SipHash: a fast short-input PRF”, Sep. 18, 2012.
J. Bethencourt, A, Sahai, and B. Waters, ‘Ciphertext-policy attribute-based encryption,’ in Proc. IEEE Security & Privacy 2007, Berkeley, CA, USA, May 2007, pp. 321-334.
J. Hur, “Improving security and efficiency in attribute-based data sharing,” IEEE Trans. Knowledge Data Eng., vol. 25, No. 10, pp. 2271-2282, Oct. 2013.
J. Shao and Z. Cao. CCA-Secure Proxy Re-Encryption without Pairings. Public Key Cryptography. Springer Lecture Notes in Computer Sciencevol. 5443 (2009).
Jacobson, Van et al. ‘VoCCN: Voice Over Content-Centric Networks.’ Dec. 1, 2009. ACM ReArch'09.
Jacobson et al., “Custodian-Based Information Sharing,” Jul. 2012, IEEE Communications Magazine: vol. 50 Issue 7 (p. 3843).
Ji, Kun, et al. “Prognostics enabled resilient control for model-based building automation systems.” Proceedings of the 12th Conference of International Building Performance Simulation Association. 2011.
K. Liang, L. Fang, W. Susilo, and D.S. Wong, “A Ciphertext-policy attribute-based proxy re-encryption with chosen-ciphertext security,” in Proc. INCoS 2013, Xian, China, Sep. 2013, pp. 552-559.
Katipamula, Srinivas, and Michael R. Brambley. “Review article: methods for fault detection, diagnostics, and prognostics for building systemsa review, Part I.” HVAC&R Research 11.1 (2005): 3-25.
Katipamula, Srinivas, and Michael R. Brambley. “Review article: methods for fault detection, diagnostics, and prognostics for building systemsa review, Part II.” HVAC&R Research 11.2 (2005): 169-187.
L. Zhou, V. Varadharajan, and M. Hitchens, “Achieving secure role-based access control on encrypted data in cloud storage,” IEEE Trans. Inf. Forensics Security, vol. 8, No. 12, pp. 1947-1960, Dec. 2013.
Li, Wenjia, Anupam Joshi, and Tim Finin. “Coping with node misbehaviors in ad hoc networks: A multi-dimensional trust management approach.” Mobile Data Management (MDM), 2010 Eleventh International Conference on. IEEE, 2010.
Lopez, Javier, et al. “Trust management systems for wireless sensor networks: Best practices.” Computer Communications 33.9 (2010): 1086-1093.
Gopal et al. “Integrating content-based Mechanisms with hierarchical File systems”, Feb. 1999, University of Arizona, 15 pages.
M. Green and G. Ateniese, “Identity-based proxy re-encryption,” in Proc. ACNS 2007, Zhuhai, China, Jun. 2007, pp. 288-306.
M. Ion, J. Zhang, and E.M. Schooler, “Toward content-centric privacy in ICN: Attribute-based encryption and routing,” in Proc. ACM SIGCOMM ICN 2013, Hong Kong, China, Aug. 2013, pp. 39-40.
M. Naor and B. Pinkas “Efficient trace and revoke schemes,” in Proc. FC 2000, Anguilla, British West Indies, Feb. 2000, pp. 1-20.
M. Nystrom, S. Parkinson, A. Rusch, and M. Scott, “PKCS#12: Personal information exchange syntax v. 1.1,” IETF RFC 7292, K. Moriarty, Ed., Jul 2014.
M. Parsa and J.J. Garcia-Luna-Aceves, “A Protocol for Scalable Loop-free Multicast Routing.” IEEE JSAC, Apr. 1997.
M. Walfish, H. Balakrishnan, and S. Shenker, “Untangling the web from DNS,” in Proc. USENIX NSDI 2004, Oct. 2010, pp. 735-737.
Mahadevan, Priya, et al. “Orbis: rescaling degree correlations to generate annotated internet topologies.” ACM SIGCOMM Computer Communication Review. vol. 37. No. 4. ACM, 2007.
Mahadevan, Priya, et al. “Systematic topology analysis and generation using degree correlations.” ACM SIGCOMM Computer Communication Review. vol. 36. No. 4. ACM, 2006.
Matocha, Jeff, and Tracy Camp. ‘A taxonomy of distributed termination detection algorithms.’ Journal of Systems and Software 43.3 (1998): 207-221.
Matteo Varvello et al., “Caesar: A Content Router for High Speed Forwarding”, ICN 2012, Second Edition on Information-Centric Networking, New York, Aug. 2012.
McWilliams, Jennifer A., and Iain S. Walker. “Home Energy Article: A Systems Approach to Retrofitting Residential HVAC Systems.” Lawrence Berkeley National Laboratory (2005).
Merindol et al., “An efficient algorithm to enable path diversity in link state routing networks”, Jan. 10, Computer Networks 55 (2011), pp. 1132-1140.
Mobility First Project [online], http://mobilityfirst.winlab.rutgers.edu/, Downloaded Mar. 9, 2015.
Narasimhan, Sriram, and Lee Brownston. “HyDE—A General Framework for Stochastic and Hybrid Modelbased Diagnosis.” Proc. DX 7 (2007): 162-169.
Omar, Mawloud, Yacine Challal, and Abdelmadjid Bouabdallah. “Certification-based trust models in mobile ad hoc networks: A survey and taxonomy.” Journal of Network and Computer Applications 35.1 (2012): 268-286.
P. Mahadevan, E.Uzun, S. Sevilla, and J. Garcia-Luna-Aceves, “CCN-krs: A key resolution service for ccn,” in Proceedings of the 1st International Conference on Information-centric Networking, Ser. INC 14 New York, NY, USA: ACM, 2014, pp. 97-106. [Online]. Available: http://doi.acm.org/10.1145/2660129.2660154.
R. H. Deng, J. Weng, S. Liu, and K. Chen. Chosen-Ciphertext Secure Proxy Re-Encryption without Pairings. CANS. Spring Lecture Notes in Computer Science vol. 5339 (2008).
Rosenberg, J. “Interactive Connectivity Establishment (ICE): A Protocol for Network Address Translator (NAT) Traversal for Offer/Answer Protocols”, Apr. 2010, pp. 1-117.
S. Chow, J. Weng, Y. Yang, and R. Deng. Efficient Unidirectional Proxy Re-Encryption. Progress in Cryptology—AFRICACRYPT 2010. Springer Berlin Heidelberg (2010).
S. Deering, “Multicast Routing in Internetworks and Extended LANs,” Proc. ACM SIGCOMM '88, Aug. 1988.
S. Deering et al., “The PIM architecture for wide-area multicast routing,” IEEE/ACM Trans, on Networking, vol. 4, No. 2, Apr. 1996.
S. Jahid, P. Mittal, and N. Borisov, “EASiER: Encryption-based access control in social network with efficient revocation,” in Proc. ACM ASIACCS 2011, Hong Kong, China, Mar. 2011, pp. 411-415.
S. Kamara and K. Lauter, “Cryptographic cloud storage,” in Proc. FC 2010, Tenerife, Canary Islands, Spain, Jan. 2010, pp. 136-149.
S. Kumar et al. “Peacock Hashing: Deterministic and Updatable Hashing for High Performance Networking,” 2008, pp. 556-564.
S. Misra, R. Tourani, and N.E. Majd, “Secure content delivery in information-centric networks: Design, implementation, and analyses,” in Proc. ACM SIGCOMM ICN 2013, Hong Kong, China, Aug. 2013, pp. 73-78.
S. Yu, C. Wang, K. Ren, and W. Lou, “Achieving secure, scalable, and fine-grained data access control in cloud computing,” in Proc. IEEE INFOCOM 2010, San Diego, CA, USA, Mar. 2010, pp. 1-9.
S.J. Lee, M. Gerla, and C. Chiang, “On-demand Multicast Routing Protocol in Multihop Wireless Mobile Networks,” Mobile Networks and Applications, vol. 7, No. 6, 2002.
Sandvine, Global Internet Phenomena Report—Spring 2012. Located online at http://www.sandvine.com/downloads/documents/Phenomenal H 2012/Sandvine Global Internet Phenomena Report 1H 2012.pdf.
Schein, Jeffrey, and Steven T. Bushby. A Simulation Study of a Hierarchical, Rule-Based Method for System-Level Fault Detection and Diagnostics in HVAC Systems. US Department of Commerce,[Technology Administration], National Institute of Standards and Technology, 2005.
Shani, Guy, Joelle Pineau, and Robert Kaplow. “A survey of point-based POMDP solvers.” Autonomous Agents and Multi-Agent Systems 27.1 (2013): 1-51.
Sheppard, John W., and Stephyn GW Butcher. “A formal analysis of fault diagnosis with d-matrices.” Journal of Electronic Testing 23.4 (2007): 309-322.
Shih, Eugene et al., ‘Wake on Wireless: An Event Driven Energy Saving Strategy for Battery Operated Devices’, Sep. 23, 2002, pp. 160-171.
Shneyderman, Alex et al., ‘Mobile VPN: Delivering Advanced Services in Next Generation Wireless Systems’, Jan. 1, 2003, pp. 3-29.
Solis, Ignacio, and J. J. Garcia-Luna-Aceves. ‘Robust content dissemination in disrupted environments.’ proceedings of the third ACM workshop on Challenged networks. ACM, 2008.
Sun, Ying, and Daniel S. Weld. “A framework for model-based repair.” AAAI. 1993.
T. Ballardie, P. Francis, and J. Crowcroft, “Core Based Trees (CBT),” Proc. ACM SIGCOMM '88, Aug. 1988.
T. Dierts, “The transport layer security (TLS) protocol version 1.2,” IETF RFC 5246, 2008.
T. Koponen, M. Chawla, B.-G. Chun, A. Ermolinskiy, K.H. Kim, S. Shenker, and I. Stoica, ‘A data-oriented (and beyond) network architecture,’ ACM SIGCOMM Computer Communication Review, vol. 37, No. 4, pp. 181-192, Oct. 2007.
The Despotify Project (2012). Available online at http://despotify.sourceforge.net/.
V. Goyal, 0. Pandey, A. Sahai, and B. Waters, “Attribute-based encryption for fine-grained access control of encrypted data,” in Proc. ACM CCS 2006, Alexandria, VA, USA, Oct.-Nov. 2006, pp. 89-98.
V. Jacobson, D.K. Smetters, J.D. Thornton, M.F. Plass, N.H. Briggs, and R.L. Braynard, ‘Networking named content,’ in Proc. ACM CoNEXT 2009, Rome, Italy, Dec. 2009, pp. 1-12.
V. K. Adhikari, S. Jain, Y. Chen, and Z.-L. Zhang. Vivisecting Youtube:An Active Measurement Study. In INFOCOM12 Mini-conference (2012).
Verma, Vandi, Joquin Fernandez, and Reid Simmons. “Probabilistic models for monitoring and fault diagnosis.” The Second IARP and IEEE/RAS Joint Workshop on Technical Challenges for Dependable Robots in Human Environments. Ed. Raja Chatila. Oct. 2002.
Vijay Kumar Adhikari, Yang Guo, Fang Hao, Matteo Varvello, Volker Hilt, Moritz Steiner, and Zhi-Li Zhang. Unreeling Netflix: Understanding and Improving Multi-CDN Movie Delivery. In the Proceedings of IEEE INFOCOM 2012 (2012).
Vutukury, Srinivas, and J. J. Garcia-Luna-Aceves. A simple approximation to minimum-delay routing. vol. 29. No. 4. ACM, 1999.
W.-G. Tzeng and Z.-J. Tzeng, “A public-key traitor tracing scheme with revocation using dynamic shares,” in Proc. PKC 2001, Cheju Island, Korea, Feb. 2001, pp. 207-224.
Waldvogel, Marcel “Fast Longest Prefix Matching: Algorithms, Analysis, and Applications”, A dissertation submitted to the Swiss Federal Institute of Technology Zurich, 2002.
Walker, Iain S. Best practices guide for residential HVAC Retrofits. No. LBNL-53592. Ernest Orlando Lawrence Berkeley National Laboratory, Berkeley, CA (US), 2003.
Wang, Jiangzhe et al., “DMND: Collecting Data from Mobiles Using Named Data”, Vehicular Networking Conference, 2010 IEEE, pp. 49-56.
Yi, Cheng, et al. ‘A case for stateful forwarding plane.’ Computer Communications 36.7 (2013): 779-791.
Yi, Cheng, et al. ‘Adaptive forwarding in named data networking.’ ACM SIGCOMM computer communication review 42.3 (2012): 62-67.
Zahariadis, Theodore, et al. “Trust management in wireless sensor networks.” European Transactions on Telecommunications 21.4 (2010): 386-395.
Zhang, et al., “Named Data Networking (NDN) Project”, http://www.parc.com/publication/2709/named-data-networking-ndn-project.html, Oct. 2010, NDN-0001, PARC Tech Report.
Zhang, Lixia, et al. ‘Named data networking.’ ACM SIGCOMM Computer Communication Review 44.3 {2014): 66-73.
Soh et al., “Efficient Prefix Updates for IP Router Using Lexicographic Ordering and Updateable Address Set”, Jan. 2008, IEEE Transactions on Computers, vol. 57, No. 1.
Beben et al., “Content Aware Network based on Virtual Infrastructure”, 2012 13th ACIS International Conference on Software Engineering.
Biradar et al., “Review of multicast routing mechanisms in mobile ad hoc networks”, Aug. 16, Journal of Network and Computer Applications 35 (2012) 221-229.
D. Trossen and G. Parisis, “Designing and realizing and information-centric internet,” IEEE Communications Magazing, vol. 50, No. 7, pp. 60-67, Jul. 2012.
Garcia-Luna-Aceves et al., “Automatic Routing Using Multiple Prefix Labels”, 2012, IEEE, Ad Hoc and Sensor Networking Symposium.
Gasti, Paolo et al., ‘DoS & DDoS in Named Data Networking’, 2013 22nd International Conference on Computer Communications and Networks (ICCCN), Aug. 2013, pp. 1-7.
Ishiyama, “On the Effectiveness of Diffusive Content Caching in Content-Centric Networking”, Nov. 5, 2012, IEEE, Information and Telecommunication Technologies (APSITT), 2012 9th Asia-Pacific Symposium.
J. Hur and D.K. Noh, “Attribute-based access control with efficient revocation in data outsourcing systers,” IEEE Trans. Parallel Distrib. Syst, vol. 22, No. 7, pp. 1214-1221, Jul. 2011.
Kaya et al., “A Low Power Lookup Technique for Multi-Hashing Network Applications”, 2006 IEEE Computer Society Annual Symposium on Emerging VLSI Technologies and Architectures, Mar. 2006.
S. Kamara and K. Lauter. Cryptographic Cloud Storage. Financial Cryptography and Data Security. Springer Berlin Heidelberg (2010).
RTMP (2009). Available online at http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/rtmp/ pdf/rtmp specification 1.0.pdf.
Hoque et al., “NLSR: Named-data Link State Routing Protocol”, Aug. 12, 2013, ICN'13.
Nadeem Javaid, “Analysis and design of quality link metrics for routing protocols in Wireless Networks”, PhD Thesis Defense, Dec. 15, 2010, Universete Paris-Est.
Wetherall, David, “Active Network vision and reality: Lessons form a capsule-based system”, ACM Symposium on Operating Systems Principles, Dec. 1, 1999. pp. 64-79.
Kulkarni A.B. et al., “Implementation of a prototype active network”, IEEE, Open Architectures and Network Programming, Apr. 3, 1998, pp. 130-142.
Xie et al. “Collaborative Forwarding and Caching in Content Centric Networks”, Networking 2012.
Amadeo et al. “Design and Analysis of a Transport-Level Solution for Content-Centric VANETs”, University “Mediterranea” of Reggio Calabria, Jun. 15, 2013.
Lui et al. (A TLV-Structured Data Naming Scheme for Content-Oriented Networking, pp. 5822-5827, International Workshop on the Network of the Future, Communications (ICC), 2012 IEEE International Conference on Jun. 10-15, 2012).
Extended European Search Report in counterpart European Application No. 16197442.3, dated Apr. 5, 2017, 9 pages.
Office Action in counterpart European Application No. 16197442.3, dated Mar. 28, 2018, 7 pages.
Menezes, et al., “Chapter 10: Identification and Entity Authentication,” Handbook of Applied Cryptography, Oct. 1996, 41 pages.
Related Publications (1)
Number Date Country
20170149747 A1 May 2017 US