Providing management functions in decentralized networks

• US 7,039,701 B2
• Filed: 03/27/2002
• Issued: 05/02/2006
• Est. Priority Date: 03/27/2002
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Wesley, Ajamu A.
• Primary Examiner(s): Caldwell, Andrew
• Assistant Examiner(s): VU, THONG H
• Application Number:
  US10/107,842
• Publication Number:
  US 20030188019A1
• Time in Patent Office: 1,497 Days
• Field of Search: 709/203, 709/206, 709/221, 709/223, 709/224, 709/228, 709/230, 709/225, 709/204, 709/205, 707/10, 713/156, 370/401, 270/254, 705/37
• US Class Current: 709/224
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/1051 Group master selection mechanisms
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Methods, systems, and computer program products are disclosed for providing management functions in decentralized networks. Persistent identifiers are defined for nodes, allowing nodes to be identified across sessions and invocations, even though they re-enter the network with a different network address. Paths taken by content resources as they traverse the network (e.g. which nodes forwarded the content) are persisted, along with reputation information about nodes (e.g. indicating how successful they are at answering queries from peers). Trust relationships can be derived using the persisted information. A tiered broadcast strategy is defined for reducing the number of messages exchanged. Preferred embodiments leverage a web services implementation model.

Claims

1. A method of providing management functions in a decentralized network, comprising steps of:

creating a persistent node identifier to identify each of a plurality of nodes in the network, even though a different network address may be assigned to the node upon entering the network multiple times;

creating a mapping between the persistent node identifier of each node and a current network address assigned to that node, and revising the mapping to reflect the current network address assigned to the node upon each subsequent entry of the node into the network, such that an identity of each of the nodes can be resolved even though a current network address assigned to the node upon entering the network may vary from one entry to another;

asserting, by a particular one of the nodes, that it is allowed to perform a management function wherein the particular node directs operation of one or more other nodes in the network; and

using the persistent node identifier of the particular node, by a different one of the nodes that receives the assertion, to verify whether the particular node is allowed to perform the management function.

2. The method according to claim 1, further comprising the step of associating a reputation with each of the nodes, wherein the reputation of each node is located using the node'"'"'s persistent node identifier, and wherein the step of using the persistent node identifier further comprises steps of:

locating, by the different one, the reputation of the particular node using its persistent node identifier; and

concluding, by the different one, that the particular node is allowed to perform the management function if the particular node has a suitable reputation.

3. The method according to claim 2, wherein the suitability of the reputation is based on behavior of the particular node over time.

4. The method according to claim 2, wherein the suitability of the reputation is based on a value stored in the located reputation being relatively high as compared to other nodes in the network.

5. The method according to claim 4, wherein the value is initialized with an externally determined value, and is then dynamically revised based on the particular node'"'"'s interactions with other nodes in the network.

6. The method according to claim 1, wherein the management function, requests the different one to replicate traffic of the different one to the particular node.

7. The method according to claim 6, further comprising the step of replicating, by the different one, its traffic to the particular node if the node different one concludes that the particular node is allowed to perform the management function.

8. The method according to claim 1, wherein the management function requests the different one to replicate one or more categories of traffic of the different one to the particular node.

9. The method according to claim 1, wherein the management function requests the different one to replicate, to the particular node, all traffic of the different one which involves reputations of nodes or which transmits content between nodes.

10. The method according to claim 1, wherein the management function requests the different one to respond to the particular node with information pertaining to the different one.

11. The method according to claim 10, wherein the different one responds with the requested information only if the different one concludes that the particular node is allowed to perform the management function.

12. The method according to claim 10, wherein the requested information is a reputation stored by the different one.

13. The method according to claim 10, wherein the requested information is content stored by the different one.

14. The method according to claim 10, wherein the requested information is a traversal path of content stored by the different one.

15. The system according to claim 10, wherein the different one responds with the requested information only if the different one concludes that the particular node is allowed to perform the management function and the particular node successfully responds to a challenge issued by the different one.

16. The method according to claim 10, wherein the different one responds with the requested information only if the different one concludes that the particular node is allowed to perform the management function and a digital signature of the request verifies that the particular node sent the request.

17. The method according to claim 1, wherein the management function requests the different one to change information stored by the different one.

18. The method according to claim 17, wherein the different one performs the requested change only if the different one concludes that the particular node is allowed to perform the management function.

19. The method according to claim 17, wherein the requested change is to overwrite reputation information stored at the different one.

20. The method according to claim 17, wherein the requested change is to overwrite content stored at the different one.

21. The method according to claim 17, wherein the requested change is to overwrite a content traversal path stored at the different one.

22. The method according to claim 1, wherein the network is a peer-to-peer network.

23. A system for providing management functions in a decentralized network, comprising:

means for associating creating a persistent node identifier to identify each of a plurality of nodes in the network, even though a different network address may be assigned to the node upon entering the network multiple times;

means for creating a mapping between the persistent node identifier of each node and a current network address assigned to that node, and revising the manning to reflect the current network address assigned to the node upon each subsequent entry of the node into the network, such that an identity of each of the nodes van be resolved even though a current network address assigned to the node upon entering the network may vary from one entry to another;

means for associating a reputation with each of the nodes, wherein the reputation of each node is located using the node'"'"'s persistent node identifier;

means for asserting, by a particular one of the nodes, that it is allowed to perform a management function wherein the particular node directs operation of one more other nodes in the network;

means for locating, by a different one of the nodes that receives the assertion, the reputation of the particular node using its persistent node identifier; and

means for concluding, by the different one, that the particular node is allowed to perform the management functions if the particular node has a suitable reputation.

24. The system according to claim 23, wherein the suitability of the reputation is based on behavior of the particular node over time.

25. The system according to claim 23, wherein the suitability of the reputation is based on a value in the located reputation being relatively high as compared to other nodes in the network, and wherein the value is initialized with an externally determined value and is then dynamically revised based on the particular node'"'"'s interactions with other nodes in the network.

26. The system according to claim 23, wherein the management function requests the different one to replicate one or more categories of traffic of the different one to the particular node, end further comprising means for replicating, by the different one, the categories of traffic if the different one concludes that the particular node is allowed to perform the management function.

27. The system according to claim 23, wherein the management function requests the different one to respond to the particular node with a reputation stored by the different one, and wherein the different one responds with the requested reputation only if the different one concludes that the particular node is allowed to perform the management function.

28. The system according to claim 23, wherein the management function requests the different one to respond to the particular node with content stored by the different one, and wherein the different one responds with the requested content only if the different one concludes that the particular node is allowed to perform the management function and the particular node successfully responds to a challenge issued by the different one.

29. The system according to claim 23, wherein the management function requests the different one to overwrite reputation information stored at the different one, and wherein the different one performs the requested overwriting only if the different one concludes that the particular node is allowed to perform the management function and a digital signature of the request verifies that the particular node sent the request.

30. The system according in claim 23, wherein the requested change is to overwrite content stored at the different one, and wherein the different one performs the requested overwriting only if the different one concludes that the particular node is allowed to perform the management function and the particular node successfully responds to a, challenge issued by the different one.

31. A computer program product for providing management functions in an ad hoc network, where a collection of nodes making up the network may change over time, the computer program product embodied on one or more computer-readable media and comprising;

computer-readable program code means for creating a persistent node identifier in identify each of a plurality of nodes in the network, even though a different network address may be assigned to the node upon entering the network multiple times;

computer-readable program code means for creating a mapping between the persistent node identifier of each node and a current network address assigned to that node, and revising the mapping to reflect the current network address assigned to the node upon each subsequent entry of the node into the network, such that an identity of each of the nodes can be resolved even though a current network address assigned to the node upon entering the network may vary from one entry to another;

computer-readable program code means for associating a reputation wit each of the nodes, wherein the reputation of each node is located using the node'"'"'s persistent node identifier;

computer-readable program code means for asserting, by a particular one of the nodes, that it is allowed to perform a management function wherein the particular node directs operation of one or more other nodes in the network;

computer-readable program code means for locating, by a different one of the nodes that receives the assertion, the reputation of the particular node using its persistent node identifier; and

computer-readable program code means for concluding by the different one, that the particular node is allowed to perform management functions if the particular node has a suitable reputation.

32. The computer program product according to claim 31, wherein the suitability of the reputation is based on behavior of the particular node over time.

33. The computer program product according to claim 31, wherein the management function requests the different one to replicate, to the particular node, all traffic of the different one which involves reputations of nodes or which transmits content between nodes, and further comprising computer-readable program code means for replicating, by the different one, that traffic if the different one concludes that the particular node is allowed to perform the management function.

34. The computer program product according to claim 31, wherein the management function requests the different one to respond to the particular node with a traversal path of content stored by the different one, and wherein the different one responds with the requested traversal path only if the different one concludes that the particular node is allowed to perform the management function.

35. The computer program product according to claim 31, wherein the requested change is to overwrite a content traversal path stored at the different one and wherein the receiving node different one performs the requested overwriting only if the different one concludes that the particular node is allowed to perform the management fiction.