SYSTEM FOR A SECURE ENCRYPTION PROXY IN A CONTENT CENTRIC NETWORK

    公开(公告)号:US20180337902A1

    公开(公告)日:2018-11-22

    申请号:US16051897

    申请日:2018-08-01

    Abstract: A router between a content consuming device and a content storage device obtains an interest corresponding to a content object. The interest includes a name identifying the content storage device, signaling information, an authentication token, and an inner interest identifying an actual content object stored at the content storage device. The inner interest is encrypted with an encryption key shared between the content storage device and the content consuming device, but not shared with the router. The router authenticates the interest by verifying the authentication token using an authentication key shared with the content consuming device. The router then provides the interest to the content storage device. The router obtains the content object, which includes at least a portion of the actual content object encrypted with the encryption key, from the content storage device. The router provides the content object to the content consuming device.

    Bit-aligned header compression for CCN messages using dictionary

    公开(公告)号:US10021222B2

    公开(公告)日:2018-07-10

    申请号:US14932588

    申请日:2015-11-04

    Inventor: Marc E. Mosko

    CPC classification number: H04L69/22 H04L69/04

    Abstract: One embodiment provides a system in a first node that facilitates efficient packet forwarding. During operation, the system stores, in a storage device in a first node, a static dictionary comprising a mapping between a type and length (TL) string and a byte-aligned compressed replacement string. The system encodes the byte-aligned compressed replacement string based on an encoding technique to generate a bit-aligned encoded replacement string and stores a mapping between the encoded replacement string and the TL string in an encoded dictionary. If the system identifies the TL string in a packet, the system replaces the TL string with the encoded replacement string and transmits the packet to a second node storing the encoded dictionary in a local storage device, thereby facilitating bit-aligned compression of a TL string.

    System and method for direct storage access in a content-centric network

    公开(公告)号:US09836540B2

    公开(公告)日:2017-12-05

    申请号:US14196498

    申请日:2014-03-04

    Inventor: Marc E. Mosko

    Abstract: One embodiment of the present invention provides a system for caching content data to a storage device attached to a node in a content-centric network (CCN). During operation, the system receives a content packet; forwards the content packet to an incoming port of an interest in the content packet; caches a copy of the content packet in the attached storage device, assembles a query; which includes at least a network header and an address associated with storage blocks at which the cached copy of the content packet is located, corresponding to the content packet; and stores the query in a cache table, thereby facilitating a subsequent direct access to the storage blocks using the assembled query to retrieve the copy of the content packet.

    Header compression for CCN messages using dictionary

    公开(公告)号:US09807205B2

    公开(公告)日:2017-10-31

    申请号:US14930244

    申请日:2015-11-02

    Inventor: Marc E. Mosko

    CPC classification number: H04L69/22 H04L45/74 H04L69/04

    Abstract: One embodiment provides a system that facilitates efficient packet forwarding. During operation, the system stores, in a storage device in a first node, a static dictionary comprising a mapping between a type and length (TL) string and a compressed replacement string. In response to identifying the TL string in a packet, the system replaces the TL string with the compressed replacement string and transmits the packet to a second node, which stores the static dictionary in a local storage device, thereby facilitating compression of a TL string.

    System and method for direct storage access in a content-centric network

    公开(公告)号:US10445380B2

    公开(公告)日:2019-10-15

    申请号:US15710984

    申请日:2017-09-21

    Inventor: Marc E. Mosko

    Abstract: One embodiment of the present invention provides a system for caching content data to a storage device attached to a node in a content-centric network (CCN). During operation, the system receives a content packet; forwards the content packet to an incoming port of an interest in the content packet; caches a copy of the content packet in the attached storage device, assembles a query; which includes at least a network header and an address associated with storage blocks at which the cached copy of the content packet is located, corresponding to the content packet; and stores the query in a cache table, thereby facilitating a subsequent direct access to the storage blocks using the assembled query to retrieve the copy of the content packet.

    Flow control with network named fragments

    公开(公告)号:US10355999B2

    公开(公告)日:2019-07-16

    申请号:US14863307

    申请日:2015-09-23

    Abstract: One embodiment provides a system that facilitates efficient and secure flow control based on a fragmentation protocol. During operation, the system receives, by an intermediate node, a first fragment which is a fragment of a content object that is fragmented into a plurality of fragments, wherein the plurality of fragments includes at least one named fragment, which indicates a name associated with the content object, the name being a hierarchically structured variable-length identifier that comprises contiguous name components ordered from a most general level to a most specific level. The intermediate node detects a congestion, and sets an indicator for congestion notification in the received fragment. The intermediate node forwards the received fragment, and drops a second fragment received after the forwarded fragment.

    Reconstructable content objects
    37.
    发明授权

    公开(公告)号:US10237075B2

    公开(公告)日:2019-03-19

    申请号:US15483826

    申请日:2017-04-10

    Inventor: Marc E. Mosko

    Abstract: One embodiment of the present invention provides a system for delivering a content piece over a network using a set of reconstructable objects. During operation, the system obtains a metadata file that includes a set of rules; generates the set of reconstructable objects for the content piece based on the set of rules included in the metadata file; cryptographically signs the set of reconstructable objects to obtain a set of signed reconstructable objects; and delivers, over the network, the set of signed reconstructable objects along with the metadata file to a recipient, thereby enabling the recipient to extract and store a copy of the content piece and then to reconstruct the set of signed reconstructable objects from the stored copy of the content piece and the metadata file.

    System and Method for Process Migration in a Content Centric Network

    公开(公告)号:US20190020732A1

    公开(公告)日:2019-01-17

    申请号:US16135195

    申请日:2018-09-19

    Inventor: Marc E. Mosko

    CPC classification number: H04L67/34 H04L67/06 H04L67/10 H04L67/327 H04L67/42

    Abstract: One embodiment provides a system. In operation, the system generates a first interest for a first manifest which indicates a first phase of a migration of a data model and indicates a first plurality of resources with corresponding names; in response to receiving the first manifest, transmits, based on the corresponding names of the first plurality of resources, a first plurality of interests for the first plurality of resources; receives a second manifest which indicates a second phase of the migration and indicates a second plurality of resources with corresponding names; transmits, based on the corresponding names of the second plurality of resources, a second plurality of interests for the second plurality of resources; and starts the data model on the system based on content objects retrieved in response to the first and second plurality of interests.

    System and method for process migration in a content centric network

    公开(公告)号:US10135948B2

    公开(公告)日:2018-11-20

    申请号:US15339116

    申请日:2016-10-31

    Inventor: Marc E. Mosko

    Abstract: One embodiment provides a system that facilitates a migration of a data model from a source device to a target device. During operation, the system generates, by a target device, a first interest for a first manifest which represents a version of the data model, wherein a manifest indicates a phase of the migration and a plurality of resources with corresponding names. The system transmits a first plurality of interests for the resources indicated in the first manifest based on a corresponding name. The system receives a second manifest, wherein the migration phase indicated in the second manifest is a stop-and-copy phase. The system transmits a second plurality of interests for the resources indicated in the second manifest based on a corresponding name. The system starts the data model on the system based on content objects retrieved in response to the first and second plurality of interests.

    System for a secure encryption proxy in a content centric network

    公开(公告)号:US10084764B2

    公开(公告)日:2018-09-25

    申请号:US15154825

    申请日:2016-05-13

    Abstract: One embodiment provides a system that facilitates a secure encryption proxy in a content centric network. During operation, the system receives, by an intermediate router from a content-consuming computing device, a first interest that includes a first name, signaling information encrypted based on a signaling key, and an inner interest encrypted based on an encryption key. The inner interest includes a name for a manifest that represents a collection of data. The intermediate router does not possess the encryption key. The system generates one or more interests for the data represented by the manifest. The system transmits to the content-consuming computing device a content object received in response to a generated interest, wherein the intermediate router transmits the responsive content object without receiving a corresponding interest from the content-consuming computing device, thereby facilitating reduced network between the content-consuming computing device and the intermediate router.

Patent Agency Ranking