SYSTEM AND METHOD TO FACILITATE AN INFORMATION-CENTRIC NETWORKING SOCKET AND FAST IN-NETWORK AUTHENTICATION

• US 20180241669A1
• Filed: 07/25/2017
• Published: 08/23/2018
• Est. Priority Date: 02/22/2017
• Status: Abandoned Application

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Muscariello, Luca, Carofiglio, Giovanna, Auge, Jordan, Compagno, Alberto
• Application Number:
  US15/658,603
• Publication Number:
  US 20180241669A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 45/741 Routing in networks with a plurality of addressing schemes, e.g. with both IPv4 and IPv6
• CPC Class Codes: H04L 61/2503 Translation of Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/457 containing identifiers of data entities on a computer, e.g. file names
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A method is provided in one example embodiment and may include generating a first interest message for a consumer application of a first node, wherein the first interest message comprises a content name within an Internet Protocol identifying content to be received by the first node; opening an Information-Centric Networking (ICN) socket for the first node, wherein the ICN socket is associated with the content name and the consumer application; and transmitting the first interest message to an IP network, wherein the IP network comprises at least one hybrid ICN-enabled routing node that is capable of performing packet forwarding using both IP networking constructs and ICN constructs.

Claims

1. A method comprising:

generating a first interest message for a consumer application of a first node, wherein the first interest message comprises a content name within an Internet Protocol identifying content to be received by the first node;

opening an Information-Centric Networking (ICN) socket for the first node, wherein the ICN socket is associated with the content name and the consumer application; and

transmitting the first interest message to an IP network, wherein the IP network comprises at least one hybrid ICN-enabled routing node that is capable of performing packet forwarding using both IP networking constructs and ICN constructs.

2. The method of claim 1, further comprising:

receiving the first interest message by a second node;

opening an ICN socket for the second node, wherein the ICN socket is associated with the content name and a producer application of the second node;

generating a first data message by the second node, wherein the first data message comprises the content name and an indication that the ICN socket for the second node has been opened; and

transmitting the first data message to the IP network.

3. The method of claim 2, further comprising:

generating a second interest message for the consumer application of the first node, wherein the second interest message comprises the content name identifying the content to be received by the first node; and

transmitting the second interest message to the IP network.

4. The method of claim 3, further comprising:

receiving, by the first node, the first data message;

receiving, by the first node, a second data message comprising content identified by the content name, wherein the second data message is not generated by the second node; and

communicating the content to the consumer application via the ICN socket.

5. The method of claim 1, wherein the first node is a mobile user equipment, the method comprising:

receiving by the first node, a security token indicating that the first node is authorized to request data from the IP network, wherein each of a plurality of edge nodes of the IP network have a first network-based security context for the first node that is generated based on an N number of hash chain operations performed using the security token.

6. The method of claim 5, further comprising:

connecting to a particular edge node of the plurality of edge nodes by the first node;

generating a node-based security context by the first node using the security token, wherein the node-based security context is generated based on an N-1 number of hash chain operations performed using the security token; and

communicating the node-based security context to the particular edge node, wherein the node-based security context is included in the first interest message.

7. The method of claim 6, further comprising:

generating a second network-based security context by the particular edge node by performing another hash chain operation using the node-based security context received by the first node;

comparing the first network-based security context to the second network-based security context; and

forwarding the first interest message to another node within the IP network based on determination that the first network-based security context is equal to the second network-based security context.

8. One or more non-transitory tangible media encoding logic that includes instructions for execution by a processor, wherein the execution causes the processor to perform operations comprising:

generating a first interest message for a consumer application of a first node, wherein the first interest message comprises a content name within an Internet Protocol identifying content to be received by the first node;

opening an Information-Centric Networking (ICN) socket for the first node, wherein the ICN socket is associated with the content name and the consumer application; and

transmitting the first interest message to an IP network, wherein the IP network comprises at least one hybrid ICN-enabled routing node that is capable of performing packet forwarding using both IP networking constructs and ICN constructs.

9. The media of claim 8, wherein the execution causes the processor to perform further operations, comprising:

receiving the first interest message by a second node;

opening an ICN socket for the second node, wherein the ICN socket is associated with the content name and a producer application of the second node;

generating a first data message by the second node, wherein the first data message comprises the content name and an indication that the ICN socket for the second node has been opened; and

transmitting the first data message to the IP network.

10. The media of claim 9, wherein the execution causes the processor to perform further operations, comprising:

generating a second interest message for the consumer application of the first node, wherein the second interest message comprises the content name identifying the content to be received by the first node; and

transmitting the second interest message to the IP network.

11. The media of claim 10, wherein the execution causes the processor to perform further operations, comprising:

receiving, by the first node, the first data message;

receiving, by the first node, a second data message comprising content identified by the content name, wherein the second data message is not generated by the second node; and

communicating the content to the consumer application via the ICN socket.

12. The media of claim 8, wherein the first node is a mobile user equipment, wherein the execution causes the processor to perform further operations, comprising:

receiving by the first node, a security token indicating that the first node is authorized to request data from the IP network, wherein each of a plurality of edge nodes of the IP network have a first network-based security context for the first node that is generated based on an N number of hash chain operations performed using the security token.

13. The media of claim 12, wherein the execution causes the processor to perform further operations, comprising:

connecting to a particular edge node of the plurality of edge nodes by the first node;

generating a node-based security context by the first node using the security token, wherein the node-based security context is generated based on an N-1 number of hash chain operations performed using the security token; and

communicating the node-based security context to the particular edge node, wherein the node-based security context is included in the first interest message.

14. The media of claim 13, wherein the execution causes the processor to perform further operations, comprising:

generating a second network-based security context by the particular edge node by performing another hash chain operation using the node-based security context received by the first node;

comparing the first network-based security context to the second network-based security context; and

forwarding the first interest message to another node within the IP network based on determination that the first network-based security context is equal to the second network-based security context.

15. A system comprising:

at least one memory element for storing data; and

at least one processor for executing instructions associated with the data, wherein the executing causes the system to perform operations comprising;

generating a first interest message for a consumer application of a first node, wherein the first interest message comprises a content name within an Internet Protocol identifying content to be received by the first node;

opening an Information-Centric Networking (ICN) socket for the first node, wherein the ICN socket is associated with the content name and the consumer application; and

transmitting the first interest message to an IP network, wherein the IP network comprises at least one hybrid ICN-enabled routing node that is capable of performing packet forwarding using both IP networking constructs and ICN constructs.

16. The system of claim 15, wherein the executing causes the system to perform further operations, comprising:

receiving the first interest message by a second node;

opening an ICN socket for the second node, wherein the ICN socket is associated with the content name and a producer application of the second node;

generating a first data message by the second node, wherein the first data message comprises the content name and an indication that the ICN socket for the second node has been opened; and

transmitting the first data message to the IP network.

17. The system of claim 16, wherein the executing causes the system to perform further operations, comprising:

generating a second interest message for the consumer application of the first node, wherein the second interest message comprises the content name identifying the content to be received by the first node; and

transmitting the second interest message to the IP network.

18. The system of claim 17, wherein the executing causes the system to perform further operations, comprising:

receiving, by the first node, the first data message;

receiving, by the first node, a second data message comprising content identified by the content name, wherein the second data message is not generated by the second node; and

communicating the content to the consumer application via the ICN socket.

19. The system of claim 15, wherein the first node is a mobile user equipment, wherein the executing causes the system to perform further operations, comprising:

receiving by the first node, a security token indicating that the first node is authorized to request data from the IP network, wherein each of a plurality of edge nodes of the IP network have a first network-based security context for the first node that is generated based on an N number of hash chain operations performed using the security token.

20. The system of claim 19, wherein the executing causes the system to perform further operations, comprising:

connecting to a particular edge node of the plurality of edge nodes by the first node;

generating a node-based security context by the first node using the security token, wherein the node-based security context is generated based on an N-1 number of hash chain operations performed using the security token;

communicating the node-based security context to the particular edge node, wherein the node-based security context is included in the first interest message;

generating a second network-based security context by the particular edge node by performing another hash chain operation using the node-based security context received by the first node;

comparing the first network-based security context to the second network-based security context; and

forwarding the first interest message to another node within the IP network based on determination that the first network-based security context is equal to the second network-based security context.