VERIFICATION OF FRAGMENTED INFORMATION CENTRIC NETWORK CHUNKS

• US 20180219871A1
• Filed: 02/01/2017
• Published: 08/02/2018
• Est. Priority Date: 02/01/2017
• Status: Abandoned Application

• Current Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Inventors: Amin, Syed Obaid, Zheng, Qingji, Ravindran, Ravishankar
• Application Number:
  US15/422,004
• Publication Number:
  US 20180219871A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

Methods, apparatus, and systems are provided for lightweight integrity verification of fragmented chunks in an information centric network. One aspect provides a method of securely providing data. A data file is segmented into multiple chunks of data, and each of the multiple chunks is divided into virtual fragments based on a maximum transmission unit size. Hash values are calculated using the virtual fragments, and a manifest is created using the hash values. In various embodiments, the manifest is provided to a consumer based on a received interest for comparison and integrity verification of virtual fragments.

Claims

1. A method of verifying data from a producer, the method comprising:

segmenting a data file into multiple chunks of data using a processor of the producer;

dividing, using the processor, each of the multiple chunks into virtual fragments based on a maximum transmission unit size;

calculating, using the processor, hash values using the virtual fragments;

creating, using the processor, a manifest using the hash values; and

providing, using the processor, the manifest to a consumer based on a received interest for comparison and integrity verification of virtual fragments.

2. The method of claim 1, further comprising adding the hashes to a manifest file accessible to the consumer.

3. The method of claim 1, wherein calculating hash values includes using a bloom filter for each of the virtual fragments.

4. The method of claim 3, using a bloom filter includes passing the virtual fragments to one or more hash functions, wherein the bloom filter represents the hash value of a corresponding chunk.

5. The method of claim 1, further comprising providing hash values to an information centric network router for comparison and integrity verification of virtual fragments.

6. The method of claim 1, wherein a size of a chunk is a multiple of a size of the virtual fragment, except for the last chunk.

7. The method of claim 1, wherein each virtual fragment includes data from a single chunk.

8. A method implemented by an information centric network router, the method comprising:

receiving an interest for a data file segment from a consumer using a processor of the information centric network router;

sending, using the processor, the interest to a content producer;

receiving, using the processor, a fragment of the data file segment from the producer in response to the interest, along with a fragment header;

dividing, using the processor, the fragment into a virtual fragment based on a maximum transmission unit size;

comparing, using the processor, a hash value of the virtual fragment to the fragment header to verify the integrity of the virtual fragment; and

storing, using a storage device coupled to the processor, the virtual fragment if the integrity was verified.

9. The method of claim 8, wherein the comparing a hash value of the virtual fragment to a fragment header to verify the integrity of the virtual fragment includes comparing the virtual fragment on a hop-by-hop basis.

10. The method of claim 8, further comprising assembling a chunk using the stored virtual fragments.

11. The method of claim 10, further comprising forwarding the chunk to the consumer after assembling the chunk.

12. The method of claim 8, wherein dividing the fragment into virtual fragments includes using a bloom filter.

13. A network enabled computer system, comprising:

a processor; and

a storage device coupled to the processor, the storage device including instructions to cause the processor to execute operations comprising;

segmenting a data file into multiple chunks of data;

dividing each of the multiple chunks into virtual fragments based on a maximum transmission unit size;

calculating hash values using the virtual fragments;

creating a manifest using the hash values; and

providing the manifest to a consumer based on a received interest for comparison and integrity verification of virtual fragments.

14. The system of claim 13, wherein calculating hash values using the virtual fragments includes calculating hash values on a hop-by-hop basis.

15. The system of claim 13, wherein the storage device includes instructions to cause the processor to add the hashes to a manifest file accessible to the consumer.

16. The system of claim 13, wherein the storage device includes instructions to cause the processor to calculate hash values includes using a bloom filter for each of the virtual fragments.

17. The system of claim 16, wherein the storage device includes instructions to cause the processor to pass the virtual fragments to one or more hash functions, wherein the bloom filter represents the hash value of a corresponding chunk.

18. The system of claim 13, wherein the storage device includes instructions to cause the processor to provide hash values to an information centric network router for comparison and integrity verification of virtual fragments.

19. The system of claim 13, wherein a size of a chunk is a multiple of a size of one of the virtual fragments, except for the last chunk.

20. The system of claim 13, wherein each virtual fragment includes data from a single chunk.