Name Encryption Agreement in Content Centric Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Content Centric Networks (CCNs), consumers face challenges in determining the minimum routable prefix for interest names, which is necessary for routing while ensuring privacy and security, as some name components contain sensitive information.
Innovation Solution
A system that determines the minimum routable prefix by sending probing interests with increasing or binary search methods, allowing encryption of name components beyond the prefix, and optionally using a third party service for negotiation, to facilitate efficient name encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a consumer encrypts the interest name to protect privacy and security, then user privacy and security are improved, but routing capability deteriorates because sufficient name components must remain unencrypted for routing purposes
Solution Approach 1:
The interest name is segmented into two distinct parts: a routable prefix that remains unencrypted and is used for routing purposes, and a sensitive suffix that is encrypted to protect user privacy. This segmentation allows the system to simultaneously achieve secure routing and privacy protection by treating different parts of the name differently.
Solution Approach 2:
Different parts of the interest name are assigned different security properties. The prefix portion is kept in plaintext with high routing accessibility, while the suffix portion is encrypted with high security protection. This local differentiation of quality allows each part to fulfill its specific function optimally.
2Productivity
If a consumer sends probing interests to determine the minimum routable prefix, then routing efficiency is improved, but network traffic and processing overhead increase
Solution Approach 1:
The system performs preliminary probing actions before the actual content request to determine the minimum routable prefix in advance. By conducting this discovery process beforehand, the system establishes routing parameters that enable efficient subsequent communications without requiring repeated probing for each request.
Solution Approach 2:
The system sends probing interests with progressively longer prefixes until the minimum routable prefix is found. This partial action approach (sending only necessary probes rather than all possible prefix combinations) balances the need for routing information discovery with the cost of network traffic generation.
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
One embodiment provides a system that facilitates efficient name encryption in a CCN. During operation, the system determines, an index for a name of an interest, wherein the name is a hierarchically structured variable length identifier that includes contiguous name components ordered from a most general level to a most specific level, wherein the index indicates a minimum number of the contiguous name components beginning from the most general level that represent a minimum routable prefix needed to route the interest to a content producing device that can satisfy the interest. The system encrypts one or more name components of the interest name beginning with the name component immediately following the minimum routable prefix. The system transmits the interest based on the encrypted name, thereby facilitating efficient name encryption in a CCN.