Obscured Retrieval Sequence for ICN Video Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Information Centric Networking (ICN) networks face challenges in managing access and control for content objects, particularly in enforcing access rights on a per consumer or client basis, as existing encryption methods disseminate a common key to all receivers, making it easy for unauthorized users to share encrypted content.
Innovation Solution
Implementing a unique obscured retrieval sequence for content objects, where each consumer receives a personalized sequence to access chunks of content in a specific order, using a manifest key and obscured chunk identifiers, ensuring that only authorized users can access the content in the correct sequence.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a common encryption key is distributed to all consumers for content protection, then content security is improved, but unauthorized sharing and access control deteriorate
Solution Approach 1:
The patent segments the content object into multiple chunks and distributes them across different content nodes in the ICN network. Each consumer receives only specific chunks in a specific sequence, preventing unauthorized sharing even if encryption keys are compromised, as the segmented structure requires sequential reconstruction
Solution Approach 2:
The patent implements dynamic retrieval sequences where each consumer is assigned a unique permutation of chunk identifiers. The sequence is dynamically generated and changed for each consumer, making it impossible to share access rights. The system adapts the delivery sequence based on consumer identity rather than using a static common key approach
2Ease of manufacture
If basic encryption is used for content protection, then implementation simplicity is improved, but access control precision deteriorates
Solution Approach 1:
The content is divided into chunks with individual identifiers, allowing precise control over which chunks are delivered to which consumers. This segmentation enables fine-grained access control while maintaining the simplicity of encryption-based protection
Solution Approach 2:
The patent changes the parameter of chunk identifier presentation by obscuring them with random values in a unique sequence for each consumer. This transformation maintains the underlying simple encryption mechanism while adding precise access control through parameter modification
3Productivity
If content is delivered as complete objects, then retrieval efficiency is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The patent segments content into chunks that are delivered individually rather than as complete objects. This segmentation enables efficient incremental retrieval while simultaneously improving security, as consumers must receive chunks in a specific sequential order determined by their unique obscured sequence
Solution Approach 2:
The system performs preliminary actions by pre-establishing a unique obscured retrieval sequence for each consumer before content delivery. This preliminary configuration enables both efficient chunk-by-chunk retrieval and robust access control, as the sequence is predetermined and validated by the content node
Data Source
AI summary
A method is implemented by a network device operating as a content node for securely distributing a content object over an information centric networking (ICN) network. The method implements a unique obscured retrieval sequence. The method includes receiving an interest for a chunk of the content object from a client device, where the chunk is identified with an obscured chunk identifier, translating the obscured chunk identifier into a general chunk identifier for the content object, and sending the chunk of the content object to the client device.