Network Fragmentation Protocol for Selective Retransmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing content centric network (CCN) fragmentation protocols, such as FIGOA, face inefficiencies and security issues due to delayed signature verification and the need to re-request entire data streams when fragments are dropped, leading to decreased throughput and potential malicious packet injection.
Innovation Solution
A secure fragmentation protocol that allows intermediate nodes to detect congestion and mark dropping points, enabling selective re-transmission of fragment streams by using named fragments with indicators for early congestion notification or discarding, allowing requestors to re-request only specific subsequences of fragments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the FIGOA protocol is used for secure fragmentation, then signature verification is performed, but verification is delayed until all fragments are received, decreasing throughput
Solution Approach 1:
The patent applies preliminary action by having the content producer sign each fragment individually at the time of fragmentation, rather than waiting until all fragments are assembled. This allows the requesting entity to verify signatures incrementally as fragments arrive, rather than delaying verification until the entire content object is received, thereby maintaining security while improving throughput
2Reliability
If the FIGOA protocol is used, then security is maintained, but the protocol does not provide selective re-transmission capability, requiring re-request of entire data streams when fragments are dropped
Solution Approach 1:
The patent applies segmentation by introducing named fragments that individually identify specific fragment sequences within the content object. Each named fragment contains a signature that can be independently verified and a name that allows selective re-requesting of only the specific fragment sequence that was lost, rather than requiring re-transmission of the entire content object. This maintains security through individual signatures while enabling efficient selective re-transmission
3Productivity
If intermediate nodes forward all fragments, then data delivery is maximized, but congestion increases and malicious packets may be injected
Solution Approach 1:
The patent applies preliminary action by having the content producer sign each fragment at the time of creation, enabling requesting entities to verify signatures before processing fragment data. This allows intermediate nodes and requesting entities to identify and drop malicious packets that lack valid signatures, preventing congestion propagation and security threats while maintaining efficient data delivery of legitimate fragments
Data Source
AI summary
One embodiment provides a system that facilitates efficient and secure flow control based on a fragmentation protocol. During operation, the system receives, by an intermediate node, a first fragment which is a fragment of a content object that is fragmented into a plurality of fragments, wherein the plurality of fragments includes at least one named fragment, which indicates a name associated with the content object, the name being a hierarchically structured variable-length identifier that comprises contiguous name components ordered from a most general level to a most specific level. The intermediate node detects a congestion, and sets an indicator for congestion notification in the received fragment. The intermediate node forwards the received fragment, and drops a second fragment received after the forwarded fragment.