CCN Manifest Synchronization via Cryptographic Hash Chains
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Content-Centric Network (CCN) architectures face challenges in securely synchronizing collections of data using exact match names, as malicious nodes can send adverse interest packets, leading to inefficiencies and security concerns during data dissemination.
Innovation Solution
Incorporating cryptographic hashes within the CCN namespace for interest packets, specifically using hash chains and secure catalogs to authenticate and verify the integrity of data synchronization, ensuring that only trusted nodes can advertise and retrieve content objects, thereby enhancing security and efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If exact name match is used for data synchronization in CCN, then synchronization precision is improved, but security vulnerability increases due to malicious advertisement packets
Solution Approach 1:
A cryptographic hash function is introduced as an intermediary between the content object and the advertisement packet. The hash value serves as a mediator that verifies the authenticity of content objects, preventing malicious advertisements while maintaining exact name match synchronization precision
Solution Approach 2:
The system performs preliminary hashing of content objects before they are advertised or synchronized. By pre-computing and storing hash values, the system can quickly verify the authenticity of content objects during synchronization, preventing security issues before they occur
2Reliability
If cryptographic hash verification is implemented for all content objects, then security is improved, but computational overhead and system complexity increase
Solution Approach 1:
The system extracts only the essential hash verification mechanism from complex cryptographic protocols. By implementing a simplified hash-based verification system rather than full cryptographic authentication, the patent achieves security improvement while minimizing the increase in system complexity
Solution Approach 2:
Instead of verifying the entire content object, the system uses a compact hash copy as the verification token. This hash copy contains the essential authentication information in a condensed form, reducing computational overhead and system complexity while maintaining security
3Reliability
If hash values are included in every advertisement packet, then authentication capability is improved, but bandwidth consumption increases
Solution Approach 1:
The system applies partial authentication by including hash values selectively in advertisement packets rather than in all data transmissions. This partial application of authentication provides sufficient security for the critical advertisement phase while minimizing bandwidth consumption during routine data synchronization
Data Source
Figure 1
Figure 2
Figure 3
AI summary
One embodiment provides a system that facilitates facilitate secure synchronization of manifests using exact network names. During operation, the system generates an interest of advertisement comprising a name of a content object of the system. This name represents a collection of objects of the system and includes a first hash that is based on a key of the system. The first hash corresponds to a respective content object hash of one or more segments of a manifest representing the collection of objects. The system also determines a request for the content object based on the name in an interest of data from a remote node.