PROBABILISTIC LAZY-FORWARDING TECHNIQUE WITHOUT VALIDATION IN A CONTENT CENTRIC NETWORK

• US 20160044126A1
• Filed: 08/11/2014
• Published: 02/11/2016
• Est. Priority Date: 08/11/2014
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Palo Alto Research Center, Inc. (Xerox Holdings Corp.)
• Inventors: Mahadevan, Priya, Scott, Glenn C.
• Granted Patent: US 9,729,662 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

A network node can use reputation values to determine when to forego validating a cached Content Object'"'"'s authenticity. During operation, the network node can receive an Interest over a Content Centric Network (CCN). If the Content Store includes a matching Content Object that satisfies the Interest, the node obtains the cached Content Object. The node then determines whether the Interest includes a validation token that is to be used to validate the Content Object'"'"'s authenticity. If so, the node determines a reputation value for the Content Object, such that the reputation value indicates a likelihood that validation of the Content Object'"'"'s authenticity will be successful. If the network node determines that the reputation value exceeds a predetermined threshold, the node returns the Content Object without validating the Content Object'"'"'s authenticity.

Claims

1. A computer-executable method comprising:

receiving an Interest by a computing device;

obtaining a cached Content Object that satisfies the Interest;

determining that the Interest includes a validation token that is to be used to validate the Content Object'"'"'s authenticity;

determining a reputation value for the Content Object based on reputation information stored in association with the Content Object, wherein the reputation value indicates a likelihood that validation of the Content Object'"'"'s authenticity will be successful; and

responsive to determining that a reputation value exceeds a predetermined threshold, returning the Content Object without validating the Content Object'"'"'s authenticity.

2. The method of claim 1, wherein the reputation information includes at least one of:

a reputation value;

a set of attribute values; and

a set of attribute weights.

3. The method of claim 2, wherein determining the reputation value involves performing one or more of:

obtaining the reputation value from the reputation information;

computing the reputation value based on one or more of the attribute values and attribute weights from the reputation information; and

computing the reputation value from one or more of the attribute values of the reputation information and custom attribute weights for the one or more attribute values.

4. The method of claim 1, wherein the validation token includes at least one of:

a publisher key identifier; and

a hash value for the Content Object.

5. The method of claim 1, further comprising, responsive to determining that the reputation value is below a lower threshold value:

evicting the Content Object from Content Store; and

forwarding the Interest toward a publisher for the Interest'"'"'s name or name prefix.

6. The method of claim 1, further comprising, responsive to determining that the reputation value is greater than a predetermined lower threshold and less than a predetermined upper threshold:

obtaining a public key that corresponds to the Interest'"'"'s public key identifier; and

validating the Content Object'"'"'s authenticity.

7. The method of claim 6, further comprising, responsive to successfully validating the Content Object'"'"'s authenticity:

updating attribute values associated with the Content Object to reflect the successful validation; and

returning the Content Object.

8. The method of claim 6, further comprising, responsive to failed validation of the Content Object'"'"'s authenticity:

evicting the Content Object from the Content Store;

updating the reputation information associated with the Content Object to reflect the failed validation; and

forwarding the Interest toward a publisher of the Interest'"'"'s name or name prefix.

9. A non-transitory computer-readable storage medium storing instructions which when executed by a computer cause the computer to perform a method, the method comprising:

receiving an Interest;

obtaining a cached Content Object that satisfies the Interest;

determining that the Interest includes a validation token that is to be used to validate the Content Object'"'"'s authenticity;

determining a reputation value for the Content Object based on reputation information stored in association with the Content Object, wherein the reputation value indicates a likelihood that validation of the Content Object'"'"'s authenticity will be successful; and

responsive to determining that a reputation value exceeds a predetermined threshold, returning the Content Object without validating the Content Object'"'"'s authenticity.

10. The storage medium of claim 9, wherein the reputation information includes at least one of:

a reputation value;

a set of attribute values; and

a set of attribute weights.

11. The storage medium of claim 10, wherein determining the reputation value involves performing one or more of:

obtaining the reputation value from the reputation information;

computing the reputation value based on one or more of the attribute values and attribute weights from the reputation information; and

computing the reputation value from one or more of the attribute values of the reputation information and custom attribute weights for the one or more attribute values.

12. The storage medium of claim 9, wherein the validation token includes at least one of:

a publisher key identifier; and

a hash value for the Content Object.

13. The storage medium of claim 9, further comprising, responsive to determining that the reputation value is below a lower threshold value:

evicting the Content Object from Content Store; and

forwarding the Interest toward a publisher for the Interest'"'"'s name or name prefix.

14. The storage medium of claim 9, further comprising, responsive to determining that the reputation value is greater than a predetermined lower threshold and less than a predetermined upper threshold:

obtaining a public key that corresponds to the Interest'"'"'s public key identifier; and

validating the Content Object'"'"'s authenticity.

15. The storage medium of claim 14, further comprising, responsive to successfully validating the Content Object'"'"'s authenticity:

updating attribute values associated with the Content Object to reflect the successful validation; and

returning the Content Object.

16. The storage medium of claim 14, further comprising, responsive to failed validation of the Content Object'"'"'s authenticity:

evicting the Content Object from the Content Store;

updating the reputation information associated with the Content Object to reflect the failed validation; and

forwarding the Interest toward a publisher of the Interest'"'"'s name or name prefix.

17. A computing system comprising:

one or more processors;

a memory; and

a computer-readable medium coupled to the one or more processors storing instructions stored that, when executed by the one or more processors, cause the computing system to perform a method comprising;

receiving an Interest;

obtaining a cached Content Object that satisfies the Interest;

determining that the Interest includes a validation token that is to be used to validate the Content Object'"'"'s authenticity;

determining a reputation value for the Content Object based on reputation information stored in association with the Content Object, wherein the reputation value indicates a likelihood that validation of the Content Object'"'"'s authenticity will be successful; and

responsive to determining that a reputation value exceeds a predetermined threshold, returning the Content Object without validating the Content Object'"'"'s authenticity.

18. The computing system of claim 17, wherein the reputation information includes at least one of:

a reputation value;

a set of attribute values; and

a set of attribute weights.

19. The computing system of claim 18, wherein determining the reputation value involves performing one or more of:

obtaining the reputation value from the reputation information;

computing the reputation value based on one or more of the attribute values and attribute weights from the reputation information; and

computing the reputation value from one or more of the attribute values of the reputation information and custom attribute weights for the one or more attribute values.

20. The computing system of claim 17, wherein the validation token includes at least one of:

a publisher key identifier; and

a hash value for the Content Object.

21. The computing system of claim 17, wherein the method further comprises, responsive to determining that the reputation value is below a lower threshold value:

evicting the Content Object from Content Store; and

forwarding the Interest toward a publisher for the Interest'"'"'s name or name prefix.

22. The computing system of claim 17, wherein the method further comprises responsive to determining that the reputation value is greater than a predetermined lower threshold and less than a predetermined upper threshold:

obtaining a public key that corresponds to the Interest'"'"'s public key identifier; and

validating the Content Object'"'"'s authenticity.

23. The computing system of claim 22, wherein the method further comprises responsive to successfully validating the Content Object'"'"'s authenticity:

updating attribute values associated with the Content Object to reflect the successful validation; and

returning the Content Object.

24. The computing system of claim 22, further comprising, responsive to failed validation of the Content Object'"'"'s authenticity:

evicting the Content Object from the Content Store;

updating the reputation information associated with the Content Object to reflect the failed validation; and

forwarding the Interest toward a publisher of the Interest'"'"'s name or name prefix.