SECURE COLLECTION SYNCHRONIZATION USING MATCHED NETWORK NAMES

• US 20150286844A1
• Filed: 04/07/2014
• Published: 10/08/2015
• Est. Priority Date: 04/07/2014
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Palo Alto Research Center, Inc. (Xerox Holdings Corp.)
• Inventors: Mosko, Marc E.
• Granted Patent: US 9,390,289 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/2255 Hash tables
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

One embodiment provides a system that facilitates facilitate secure synchronization of manifests using exact network names. During operation, the system generates an interest of advertisement comprising a name of a content object of the system. This name represents a collection of objects of the system and includes a first hash that is based on a key of the system. The first hash corresponds to a respective content object hash of one or more segments of a manifest representing the collection of objects. The system also determines a request for the content object based on the name in an interest of data from a remote node.

Claims

1. A computer-executable method, comprising:

generating, by a computing device, an interest of advertisement comprising a name of a content object of the computing device, wherein the name represents a collection of objects at the computing device, wherein the name includes a first hash that is based on a key of the computing device;

wherein the first hash corresponds to a respective content object hash of one or more segments of a manifest representing the collection of objects; and

determining a request for the content object based on the name in an interest of data from a remote node.

2. The method of claim 1, wherein the content object is a first segment of the manifest;

and

wherein the content object comprises a second hash of a second segment of the manifest.

3. The method of claim 2, further comprising electing the manifest at the computing device for the interest of advertisement from a plurality of manifests with a same manifest hash, wherein the plurality of manifests is distributed among a plurality of nodes.

4. The method of claim 1, wherein the content object is a secure catalog at the computing device, wherein the secure catalog comprises the respective content object hash of the segments of the manifest, and wherein the first hash is a hash of the secure catalog.

5. The method of claim 4, further comprising signing the secure catalog using the key of the computing device.

6. The method of claim 4, further comprising electing the secure catalog at the computing device for the interest of advertisement from a plurality of secure catalogs with the same content object hash, wherein the plurality of secure catalogs is distributed among a plurality of nodes.

7. The method of claim 4, wherein the secure catalog is distributed among a plurality of segments;

and

wherein a content object of a first segment of the secure catalog includes a hash of a content object of a second segment of the secure catalog.

8. The method of claim 1, further comprising generating a message comprising a segment of the manifest in response to an interest of data from a remote node for the segment, wherein the interest of data includes one of the content object hashes in the secure catalog.

9. The method of claim 1, wherein the key of the computing device identifies the computing device as a trusted publisher.

10. A computer-executable method, comprising:

obtaining, by a computing device, a name of a content object of a remote node from an interest of advertisement, wherein the name represents a collection of objects at the remote node, wherein the name includes a first hash that is based on a key of the remote node;

wherein the first hash corresponds to a respective content object hash of one or more segments of a manifest representing the collection of objects; and

generating for the remote node an interest of data comprising a request for the content object based on the name.

11. A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method, the method comprising:

generating an interest of advertisement comprising a name of a content object of a local node, wherein the name represents a collection of objects at the local node, wherein the name includes a first hash that is based on a key of the local node;

wherein the first hash corresponds to a respective content object hash of one or more segments of a manifest representing the collection of objects; and

determining a request for the content object based on the name in an interest of data from a remote node.

12. The non-transitory computer-readable storage medium of claim 11, wherein the content object is a first segment of the manifest;

and

wherein the content object comprises a second hash of a second segment of the manifest.

13. The non-transitory computer-readable storage medium of claim 11, wherein the method further comprises electing the manifest at the local node for the interest of advertisement from a plurality of manifests with a same manifest hash, wherein the plurality of manifests is distributed among a plurality of nodes.

14. The non-transitory computer-readable storage medium of claim 11, wherein the content object is a secure catalog at the local node, wherein the secure catalog comprises the respective content object hash of the segments of the manifest, and wherein the first hash is a hash of the secure catalog.

15. The non-transitory computer-readable storage medium of claim 14, wherein the method further comprises signing the secure catalog using the key of the local node.

16. The non-transitory computer-readable storage medium of claim 14, wherein the method further comprises electing the secure catalog at the local node for the interest of advertisement from a plurality of secure catalogs with the same content object hash, wherein the plurality of secure catalogs is distributed among a plurality of nodes.

17. The non-transitory computer-readable storage medium of claim 14, wherein the secure catalog is distributed among a plurality of segments;

and

wherein a content object of a first segment of the secure catalog includes a hash of a content object of a second segment of the secure catalog.

18. The non-transitory computer-readable storage medium of claim 11, wherein the method further comprises generating a message comprising a segment of the manifest in response to an interest of data from a remote node for the segment, wherein the interest of data includes one of the content object hashes in the secure catalog.

19. The non-transitory computer-readable storage medium of claim 11, wherein the key of the local node identifies the local node as a trusted publisher.

20. A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method, the method comprising:

obtaining a name of a content object of a remote node from an interest of advertisement, wherein the name represents a collection of objects at the remote node, wherein the name includes a first hash that is based on a key of the remote node;

wherein the first hash corresponds to a respective content object hash of one or more segments of a manifest representing the collection of objects; and

generating for the remote node an interest of data comprising a request for the content object based on the name.