Method and apparatus for exchanging bidirectional streams over a content centric network

• US 9,203,885 B2
• Filed: 04/28/2014
• Issued: 12/01/2015
• Est. Priority Date: 04/28/2014
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Palo Alto Research Center, Inc. (Xerox Holdings Corp.)
• Inventors: Mosko, Marc E.
• Primary Examiner(s): PEARSON, DAVID J
• Application Number:
  US14/263,861
• Publication Number:
  US 20150312300A1
• Time in Patent Office: 582 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 65/60 Network streaming of media packets
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 67/1004 Server selection for load balancing
• CPC Class Codes: H04L 69/04 Protocols for data compression, e.g. ROHC

Abstract

A data-streaming system facilitates establishing a bidirectional data stream over a content centric network (CCN). During operation, the system determines a first routable name prefix associated with a service provider to which the network device desires to establish the bidirectional streaming session. The system also generates a client stream name to provide to the service provider. The client stream name includes a second routable prefix to a local network device, and includes a client stream identifier for a first data stream from the service provider. The system then disseminates an Interest message whose name includes the first routable name prefix and the client stream name. After receiving a Content Object that includes the remote device'"'"'s response, the system can then communicate with the service provider using a bidirectional stream over the CCN based on the client stream name and the provider stream name.

Claims

1. A computer-implemented method for establishing a bidirectional stream over a content centric network (CCN), the method comprising:

determining, by a local network device, a first routable name prefix associated with a service provider;

generating a client stream name to provide to the service provider, wherein the client stream name includes a second routable prefix to the local network device, and includes a client stream identifier for a first data stream from the service provider;

disseminating an Interest message that includes the first routable name prefix, and includes the client stream name appended to the first routable name prefix;

receiving a Content Object that satisfies the Interest message, wherein the Content Object'"'"'s content includes a provider stream name for a remote network device associated with the service provider, and wherein the provider stream name includes a second routable prefix to the remote network device and includes a provider stream identifier for a second data stream from the local network device to the service provider; and

communicating with the service provider using a bidirectional stream over the CCN based on the client stream name and the provider stream name.

2. The method of claim 1, wherein the Interest message includes authentication information for the local network device;

and

wherein the Content Object includes authentication information for the remote network device.

3. The method of claim 2, further comprising:

obtaining a public key of the remote network device during a session-setup process;

encrypting a session key using the remote network device'"'"'s public key;

encrypting the client stream name using the session key; and

generating the Interest message to include a marshalled data block appended to the first routable name prefix, wherein the marshalled data block includes the encrypted session key, the encrypted client stream name, and the authentication information for the local network device.

4. The method of claim 2, wherein the Content Object'"'"'s content includes an encrypted session key, which is encrypted using a public key of the local network device, and wherein the method further comprises:

decrypting the session key using a private key of the local network device; and

storing the session key in association with the bidirectional stream.

5. The method of claim 1, wherein communicating with the remote service provider involves:

disseminating one or more Interest messages that include the provider stream name associated with the remote network device, wherein a respective Interest message includes an available segment number appended to the provider stream name, and wherein the available segment number is available to the remote network device for sending a data segment to the local network device; and

responsive to receiving a Content Object associated with the provider stream name, processing the Content Object'"'"'s content based on a segment number from the Content Object'"'"'s name.

6. The method of claim 5, wherein the Content Object'"'"'s content is encrypted using a session key for the bidirectional stream;

and

wherein processing the Content Object'"'"'s contents involves decompressing the Content Object'"'"'s contents using the session key.

7. The method of claim 1, wherein communicating with the service provider involves:

receiving one or more Interest messages associated with the client stream name, wherein a respective Interest message includes a segment number available to the local network device for sending a data segment to the remote network device; and

responsive to obtaining data to send to the remote network device, generating a Content Object with a name from an Interest associated with an available segment number, wherein the Content Object'"'"'s content includes the data for the remote network device.

8. The method of claim 7, wherein generating the Content Object involves:

obtaining a session key for the bidirectional stream;

encrypting the data for the remote network device to produce an encrypted payload; and

generating the Content Object to include the encrypted payload in the Content Object'"'"'s content.

9. The method of claim 1, further comprising:

receiving, from the remote network device, a Content Object that includes a final-block identifier which identifies the Content Object as the final block for the first data stream from the service provider; and

responsive to detecting the final-block identifier in the Content Object, closing the first data stream from the remote network device.

10. The method of claim 1, further comprising:

responsive to determining that the local network device does not have more data to send to the remote network device, sending a Content Object with a name from an Interest associated with an available segment number, wherein the Content Object'"'"'s content includes a final-block identifier that identifies the Content Object as the final block for the second data stream to the service provider.

11. A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for establishing a bidirectional stream over a content centric network (CCN), the method comprising:

determining, by a local network device, a first routable name prefix associated with a service provider;

generating a client stream name to provide to the service provider, wherein the client stream name includes a second routable prefix to the local network device, and includes a client stream identifier for a first data stream from the service provider;

disseminating an Interest message that includes the first routable name prefix, and includes the client stream name appended to the first routable name prefix;

receiving a Content Object that satisfies the Interest message, wherein the Content Object'"'"'s content includes a provider stream name for a remote network device associated with the service provider, and wherein the provider stream name includes a second routable prefix to the remote network device and includes a provider stream identifier for a second data stream from the local network device to the service provider; and

communicating with the service provider using a bidirectional stream over the CCN based on the client stream name and the provider stream name.

12. The storage medium of claim 11, wherein the Interest message includes authentication information for the local network device;

and

wherein the Content Object includes authentication information for the remote network device.

13. The storage medium of claim 12, wherein the method further comprises:

obtaining a public key of the remote network device during a session-setup process;

encrypting a session key using the remote network device'"'"'s public key;

encrypting the client stream name using the session key; and

generating the Interest message to include a marshalled data block appended to the first routable name prefix, wherein the marshalled data block includes the encrypted session key, the encrypted client stream name, and the authentication information for the local network device.

14. The storage medium of claim 12, wherein the Content Object'"'"'s content includes an encrypted session key, which is encrypted using a public key of the local network device, and wherein the method further comprises:

decrypting the session key using a private key of the local network device; and

storing the session key in association with the bidirectional stream.

15. The storage medium of claim 11, wherein communicating with the remote service provider involves:

disseminating one or more Interest messages that include the provider stream name associated with the remote network device, wherein a respective Interest message includes an available segment number appended to the provider stream name, and wherein the available segment number is available to the remote network device for sending a data segment to the local network device; and

responsive to receiving a Content Object associated with the provider stream name, processing the Content Object'"'"'s content based on a segment number from the Content Object'"'"'s name.

16. The storage medium of claim 15, wherein the Content Object'"'"'s content is encrypted using a session key for the bidirectional stream;

and

wherein processing the Content Object'"'"'s contents involves decompressing the Content Object'"'"'s contents using the session key.

17. The storage medium of claim 11, wherein communicating with the service provider involves:

receiving one or more Interest messages associated with the client stream name, wherein a respective Interest message includes a segment number available to the local network device for sending a data segment to the remote network device; and

responsive to obtaining data to send to the remote network device, generating a Content Object with a name from an Interest associated with an available segment number, wherein the Content Object'"'"'s content includes the data for the remote network device.

18. The storage medium of claim 17, wherein generating the Content Object involves:

obtaining a session key for the bidirectional stream;

encrypting the data for the remote network device to produce an encrypted payload; and

generating the Content Object to include the encrypted payload in the Content Object'"'"'s content.

19. The storage medium of claim 11, wherein the method further comprises:

receiving, from the remote network device, a Content Object that includes a final-block identifier which identifies the Content Object as the final block for the first data stream from the service provider; and

responsive to detecting the final-block identifier in the Content Object, closing the first data stream from the remote network device.

20. The storage medium of claim 11, wherein the method further comprises:

responsive to determining that the local network device does not have more data to send to the remote network device, sending a Content Object with a name from an Interest associated with an available segment number, wherein the Content Object'"'"'s content includes a final-block identifier that identifies the Content Object as the final block for the second data stream to the service provider.