Controlling the spread of interests and content in a content centric network
First Claim
1. A computer-executed method for controlling the spread of interests and content in a content centric network, comprising:
- receiving a packet including a piece of content or an interest for the content, wherein the packet further includes a hierarchically structured name of the content;
identifying, using a longest-matching lookup of the hierarchically structured name of the content, a routing policy applicable to a longest matching prefix of the hierarchically structured name, wherein the routing policy specifies a condition associated with an originating entity or a destination entity of the packet, and a forwarding action corresponding to the condition;
in response to determining that the prefix matches the hierarchically structured name of the content and that the originating entity or the destination entity of the packet satisfies the condition in the routing policy, forwarding the packet according to the forwarding action specified in the routing policy;
in response to determining that the originating entity or the destination entity of the packet does not satisfy the condition in the routing policy, forwarding the packet according to a default forwarding action; and
defeating a denial-of-service attack against a policy enforcement system by greylisting a public key held by a signer of the content so that automatic retrieval of the public key is deferred.
2 Assignments
0 Petitions
Accused Products
Abstract
One embodiment of the present invention provides a system for controlling the spread of interests and content in a content centric network (CCN). During operation, the system maintains a routing policy for content data. The system also receives a packet associated with a piece of content or an interest for the content. Next, the system determines that the structured name included in the packet is within the namespace specified in the routing policy. The system further determines that the packet satisfies the condition in the routing policy. Subsequently, the system routes the packet based on in part the action corresponding to the condition as specified in the routing policy.
-
Citations
24 Claims
-
1. A computer-executed method for controlling the spread of interests and content in a content centric network, comprising:
-
receiving a packet including a piece of content or an interest for the content, wherein the packet further includes a hierarchically structured name of the content; identifying, using a longest-matching lookup of the hierarchically structured name of the content, a routing policy applicable to a longest matching prefix of the hierarchically structured name, wherein the routing policy specifies a condition associated with an originating entity or a destination entity of the packet, and a forwarding action corresponding to the condition; in response to determining that the prefix matches the hierarchically structured name of the content and that the originating entity or the destination entity of the packet satisfies the condition in the routing policy, forwarding the packet according to the forwarding action specified in the routing policy; in response to determining that the originating entity or the destination entity of the packet does not satisfy the condition in the routing policy, forwarding the packet according to a default forwarding action; and defeating a denial-of-service attack against a policy enforcement system by greylisting a public key held by a signer of the content so that automatic retrieval of the public key is deferred. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. An apparatus for controlling the spread of interests and content in a content centric network, comprising:
-
a processor; and a memory, wherein the processor is configured to; receive a packet including a piece of content or an interest for the content, wherein the packet further includes a hierarchically structured name of the content; identify, using a longest-matching lookup of the hierarchically structured name of the content, a routing policy applicable to a longest matching prefix of the hierarchically structured name, wherein the routing policy specifies a condition associated with an originating entity or a destination entity of the packet, and a forwarding action corresponding to the condition; in response to determining that the prefix matches the hierarchically structured name of the content and that the originating entity or destination entity of the packet satisfies the condition in the routing policy, forward the packet according to the forwarding action specified in the routing policy; in response to determining that the originating entity or the destination entity of the packet does not satisfy the condition in the routing policy, forward the packet according to a default forwarding action; and defeat a denial-of-service attack against a policy enforcement system by greylisting a public key held by a signer of the content so that automatic retrieval of the public key is deferred. - View Dependent Claims (10, 11, 12, 13, 14, 15, 16)
-
-
17. A computer-readable storage device storing instructions that when executed by a computer cause the computer to perform a method for controlling the spread of interests and content in a content centric network, the method comprising:
-
receiving a packet including a piece of content or an interest for the content, wherein the packet further includes a hierarchically structured name of the content; identifying, using a longest-matching lookup of the hierarchically structured name of the content, a routing policy applicable to a longest matching prefix of the hierarchically structured name, wherein the routing policy specifies a condition associated with an originating entity or a destination entity of the packet, and a forwarding action corresponding to the condition; in response to determining that the prefix matches the hierarchically structured name of the content and that the originating entity or destination entity of the packet satisfies the condition in the routing policy, forwarding the packet according to the forwarding action specified in the routing policy; in response to determining that the originating entity or destination entity of the packet does not satisfy the condition in the routing policy, forwarding the packet according to a default forwarding action; and defeating a denial-of-service attack against a policy enforcement system by greylisting a public key held by a signer of the content so that automatic retrieval of the public key is deferred. - View Dependent Claims (18, 19, 20, 21, 22, 23, 24)
-
Specification