Reconstructable content objects

• US 9,621,354 B2
• Filed: 07/17/2014
• Issued: 04/11/2017
• Est. Priority Date: 07/17/2014
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Systems, Inc.
• Inventors: Mosko, Marc E.
• Primary Examiner(s): Brown, Anthony
• Assistant Examiner(s): Anderson, Michael D
• Application Number:
  US14/334,386
• Publication Number:
  US 20160020907A1
• Time in Patent Office: 999 Days
• Field of Search: 713176
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

One embodiment of the present invention provides a system for delivering a content piece over a network using a set of reconstructable objects. During operation, the system obtains a metadata file that includes a set of rules; generates the set of reconstructable objects for the content piece based on the set of rules included in the metadata file; cryptographically signs the set of reconstructable objects to obtain a set of signed reconstructable objects; and delivers, over the network, the set of signed reconstructable objects along with the metadata file to a recipient, thereby enabling the recipient to extract and store a copy of the content piece and then to reconstruct the set of signed reconstructable objects from the stored copy of the content piece and the metadata file.

Claims

1. A computer-executable method for delivering a content piece over a network using a set of reconstructable objects, the method comprising:

obtaining, by a computer, a metadata file that includes a set of rules;

generating the set of reconstructable objects for the content piece based on the set of rules included in the metadata file;

cryptographically signing the set of reconstructable objects to obtain a set of signed reconstructable objects; and

delivering, over the network, the set of signed reconstructable objects along with the metadata file to a recipient, thereby enabling the recipient to extract and store a copy of the content piece and then to reconstruct the set of signed reconstructable objects from the stored copy of the content piece and the metadata file.

2. The method of claim 1, wherein the set of rules includes one or more of:

a rule that specifies how to chunk the content piece, wherein a respective chunk of the content piece forms a payload of a corresponding reconstructable object;

a rule that defines a naming convention;

a rule that specifies a signing key;

a rule that specifies whether to include a secure catalog; and

a rule that specifies how to generate the secure catalog based on the set of reconstructable objects.

3. The method of claim 2, wherein cryptographically signing the set of reconstructable objects involves using the specified signing key to sign each reconstructable object.

4. The method of claim 2, wherein cryptographically signing the set of reconstructable objects involves using the specified signing key to sign the secure catalog.

5. The method of claim 1, wherein the network is a content-centric network (CCN), and wherein the set of reconstructable objects conforms to a CCN standard.

6. A non-transitory computer-readable storage medium storing instructions that when executed by a computing device cause the computing device to perform a method for delivering a content piece over a network using a set of reconstructable objects, the method comprising:

obtaining, by a computer, a metadata file that includes a set of rules;

generating the set of reconstructable objects for the content piece based on the set of rules included in the metadata file;

cryptographically signing the set of reconstructable objects to obtain a set of signed reconstructable objects; and

delivering, over the network, the set of signed reconstructable objects along with the metadata file to a recipient, thereby enabling the recipient to extract and store a copy of the content piece and then to reconstruct the set of signed reconstructable objects from the stored copy of the content piece and the metadata file.

7. The computer-readable storage medium of claim 6, wherein the set of rules includes one or more of:

a rule that specifies how to chunk the content piece, wherein a respective chunk of the content piece forms a payload of a corresponding reconstructable object;

a rule that defines a naming convention;

a rule that specifies a signing key;

a rule that specifies whether to include a secure catalog; and

a rule that specifies how to generate the secure catalog based on the set of reconstructable objects.

8. The computer-readable storage medium of claim 7, wherein cryptographically signing the set of reconstructable objects involves using a private key associated with the specified signing key to sign each reconstructable object.

9. The computer-readable storage medium of claim 7, wherein cryptographically signing the set of reconstructable objects involves using a private key associated with the specified signing key to sign the secure catalog.

10. The computer-readable storage medium of claim 6, wherein the network is a content-centric network (CCN), and wherein the set of reconstructable objects conforms to a CCN standard.

11. A computer-implemented method for reconstructing a set of reconstructable objects representing a content piece, comprising:

receiving, by a computer, a set of signed reconstructable objects and an associated metadata file;

extracting payloads and one or more signatures from the set of received signed reconstructable objects;

assembling a copy of the content piece using the extracted payloads;

storing the copy of the content piece, the metadata file, and the extracted one or more signatures;

discarding the set of received signed reconstructable objects; and

in response to receiving a request for the content piece, reconstructing the set of signed reconstructable objects based on the copy of the content piece, the metadata file, and the extracted one or more signatures.

12. The method of claim 11, wherein the set of rules includes one or more of:

a rule that specifies how to chunk the content piece, wherein a respective chunk of the content piece forms a payload of a corresponding reconstructable object;

a rule that defines a naming convention;

a rule that specifies a signing key;

a rule that specifies whether to include a secure catalog; and

a rule that specifies how to generate the secure catalog based on the set of reconstructable objects.

13. The method of claim 12, wherein extracting the one or more signatures from the set of received signed reconstructable objects involves extracting a signature from each signed reconstructable object, and wherein the method further comprises verifying the signature based on the specified signing key.

14. The method of claim 13, wherein reconstructing the set of signed reconstructable objects involves inserting an extracted signature into each reconstructable object.

15. The method of claim 12, wherein extracting the one or more signatures from the set of received signed reconstructable objects involves extracting a signature from the secure catalog, and wherein the method further comprises verifying the signature based on the specified signing key.

16. The method of claim 12, further comprising:

discarding the secure catalog along with the set of received signed reconstructable objects; and

in response to receiving a request for the content piece, regenerating the secure catalog based on the rule that specifies how to generate the secure catalog.

17. The method of claim 16, wherein reconstructing the set of signed reconstructable objects involves inserting an extracted signature into the regenerated secure catalog.

18. The method of claim 11, wherein the network is a content-centric network (CCN), and wherein the set of reconstructable objects conforms to a CCN standard.

19. A computer system for reconstructing a set of reconstructable objects representing a content piece, the system comprising:

a processor; and

a storage device coupled to the processor and storing instructions which when executed by the processor cause the processor to perform a method, the method comprising;

receiving, by a computer, a set of signed reconstructable objects and an associated metadata file;

extracting payloads and one or more signatures from the set of received signed reconstructable objects;

assembling a copy of the content piece using the extracted payloads;

storing the copy of the content piece, the metadata file, and the extracted one or more signatures;

discarding the set of received signed reconstructable objects; and

in response to receiving a request for the content piece, reconstructing the set of signed reconstructable objects based on the copy of the content piece, the metadata file, and the extracted one or more signatures.

20. The system of claim 19, wherein the set of rules includes one or more of:

a rule that specifies how to chunk the content piece, wherein a respective chunk of the content piece forms a payload of a corresponding reconstructable object;

a rule that defines a naming convention;

a rule that specifies a signing key;

a rule that specifies whether to include a secure catalog; and

a rule that specifies how to generate the secure catalog based on the set of reconstructable objects.

21. The system of claim 20, wherein extracting the one or more signatures from the set of received signed reconstructable objects involves extracting a signature from each signed reconstructable object, and wherein the method further comprises verifying the signature based on the specified signing key.

22. The system of claim 20, wherein extracting the one or more signatures from the set of received signed reconstructable objects involves extracting a signature from the secure catalog, and wherein the method further comprises verifying the signature based on the specified signing key.

23. The system of claim 20, wherein the method further comprises:

discarding the secure catalog along with the set of received signed reconstructable objects; and

in response to receiving a request for the content piece, regenerating the secure catalog based on the rule that specifies how to generate the secure catalog.

24. The system of claim 19, wherein the network is a content-centric network (CCN), and wherein the set of reconstructable objects conforms to a CCN standard.