NETWORK NODE AND METHOD OF OPERATING THE NETWORK NODE

• US 20150358436A1
• Filed: 04/23/2015
• Published: 12/10/2015
• Est. Priority Date: 06/10/2014
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Kim, Eunah, Seo, Seogchung, Jang, Myeongwuk, Hyun, Sangwon
• Granted Patent: US 9,774,708 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A method of operating a network node includes receiving a response packet including an encoded content name, decoding the encoded content name, and transmitting the response packet based on the decoded content name.

Claims

1. A method of operating a network node, the method comprising:

receiving a response packet comprising an encoded content name;

decoding the encoded content name; and

transmitting the response packet based on the decoded content name.

2. The method of claim 1, wherein the encoded content name is encoded based on a predetermined condition;

the network node satisfies the predetermined condition; and

the decoding comprises decoding the encoded content name based on the predetermined condition.

3. The method of claim 2, wherein the predetermined condition is set by a network node configured to generate the response packet to limit a network range in which transmission of the response packet is allowed.

4. The method of claim 1, wherein the encoded content name is encoded based on an attribute rule comprising at least one attribute.

5. The method of claim 4, wherein the at least one attribute comprises either one or both of:

domain information; and

interface information.

6. The method of claim 4, wherein the attribute rule is associated with an access authority with respect to content included in the response packet.

7. The method of claim 1, wherein the decoding comprises decoding the encoded content name based on an attribute of the network node.

8. The method of claim 7, wherein the decoding comprises decoding the encoded content name in response to the attribute of the network node satisfying an attribute rule used in the encoding of the encoded content name.

9. The method of claim 7, wherein the attribute of the network node comprises either one or both of:

domain information of the network node; and

interface information of the network node.

10. The method of claim 1, wherein the encoded content name is encoded using an attribute rule, a public key, and a content name.

11. The method of claim 1, wherein the decoding comprises decoding the encoded content name using at least one secret key corresponding to an attribute of the network node.

12. The method of claim 11, further comprising:

performing certification on a certificate authority; and

receiving, from the certificate authority, the at least one secret key corresponding to the attribute of the network node;

wherein the at least one secret key corresponding to the attribute of the network node is one of a plurality of secret keys generated by the certificate authority corresponding to a single public key.

13. The method of claim 1, wherein the transmitting of the response packet comprises:

extracting request information corresponding to the decoded content name from pre-stored request information; and

transmitting the response packet based on the extracted request information.

14. The method of claim 1, further comprising:

receiving a request packet;

decoding at least some of encoded content names included in pre-stored response packets;

extracting a response packet corresponding to a content name included in the request packet based on the decoded content names; and

transmitting the extracted response packet in response to the request packet.

15. The method of claim 1, further comprising:

receiving a request packet;

extracting a content corresponding to a content name included in the request packet from pre-stored contents;

encoding the content name;

generating a response packet comprising the encoded content name and the extracted content; and

transmitting the generated response packet in response to the request packet.

16. The method of claim 15, wherein the encoding comprises encoding the content name using an attribute rule, a public key, and the content name.

17. The method of claim 16, wherein the public key corresponds to a plurality of secret keys;

and

the encoded content name is decoded by at least one secret key corresponding to an attribute that satisfies the attribute rule.

18. The method of claim 1, further comprising:

receiving a request packet;

determining whether a content corresponding to a content name included in the request packet is present among pre-stored contents;

decoding at least some of encoded content names included in pre-stored response packets;

determining whether a response packet corresponding to the content name included in the request packet is present among the pre-stored response packets based on the decoded content names;

storing request information based on a result of the determining being that the content corresponding to the content name and the response packet corresponding to the content name are absent; and

transmitting the request packet to a network.

19. A non-transitory computer-readable storage medium storing a program comprising instructions to cause a computer to perform the method of claim 1.

20. A network node comprising:

a receiver configured to receive a response packet comprising an encoded content name;

a decoder configured to decode the encoded content name; and

a transmitter configured to transmit the response packet based on the decoded content name.

21. A method of operating a network node, the method comprising:

receiving a response packet comprising an encoded content name;

determining whether another network node is authorized to receive the response packet based on the encoded content name;

not transmitting the response packet to the other network node in response to a result of the determining being that the other network node is not authorized to receive the response packet; and

transmitting the response packet to the other network node in response to a result of the determining being that the other network node is authorized to receive the response packet.

22. The method of claim 21, wherein the determining comprises attempting to decode the encoded content name based on information relating to the other network node;

determining that the network node is not authorized to receive the response packet in response to a result of the attempting being that the encoded content name cannot be decoded; and

determining that the network node is authorized to receive the response packet in response to a result of the attempting being that the encoded content name is decoded.

23. The method of claim 22, wherein the transmitting comprises transmitting the response packet to the other network node based on the encoded content name.

24. The method of claim 22, wherein the information related to the other network node comprises information on an interface of the network node via which the response packet is to be transmitted to the other network node.

25. The method of claim 22, wherein the information related to the other network node comprises network domain information of the other network node.