Parallel Secure Content Bootstrapping in CCNs

Solution Overview

Problem

In content-centric networks (CCNs), the sequential downloading of content and associated authentication and decryption information leads to delayed content consumption, as users must wait for all portions to be downloaded before starting to consume the content, due to the restrictive location-based addressing scheme and the need for multiple round trips to retrieve metadata and keys.

Innovation Solution

A method for parallel retrieval of content and necessary information, where Interests are sent for content chunks and related authentication and decryption information simultaneously, allowing for concurrent download and verification of authentication and decryption keys, enabling immediate consumption of content as it is downloaded.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If sequential downloading of content and authentication/decryption information is used, then security and authentication are ensured, but content consumption time is delayed

Engineering Contradiction:

Improveauthentication securityVSAvoidcontent consumption time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by requesting authentication information and decryption keys in parallel with content download rather than sequentially. Multiple Interest packets are sent simultaneously for different content portions and their associated authentication/decryption information, allowing the consumer to prepare for content consumption while downloading is in progress.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The content is divided into multiple portions or segments, each with its own authentication and decryption information. Instead of downloading all content and authentication information sequentially, the system segments the requests and processes them in parallel, reducing overall wait time while maintaining security verification for each segment.

Inventive Principle:

Principle #1Segmentation

2Reliability

If metadata and decryption keys are downloaded after content portions, then data integrity is maintained, but user experience is degraded

Engineering Contradiction:

Improvedata integrityVSAvoiduser experience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary actions by requesting authentication information and decryption keys in parallel with content download rather than sequentially. Multiple Interest packets are sent simultaneously for different content portions and their associated authentication/decryption information, allowing the consumer to prepare for content consumption while downloading is in progress.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system maintains continuous useful action by overlapping the download of content portions with the download of their associated metadata and decryption keys. This parallel processing ensures that no time is wasted waiting for authentication information after content download completes, keeping the consumption process continuous once verification begins.

Inventive Principle:

Principle #20Continuity of useful action

3Reliability

If multiple round trips are used to retrieve content and keys, then secure verification is achieved, but network efficiency is reduced

Engineering Contradiction:

Improveverification securityVSAvoidnetwork efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system merges multiple separate request trips into a single parallel request phase. Instead of making sequential round trips for content portions, authentication information, and decryption keys, all necessary Interest packets are sent simultaneously in one phase, reducing the number of separate network round trips while maintaining verification security.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The system performs preliminary actions by requesting authentication information and decryption keys in parallel with content download rather than sequentially. Multiple Interest packets are sent simultaneously for different content portions and their associated authentication/decryption information, allowing the consumer to prepare for content consumption while downloading is in progress.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentEP2966834B1System and method for parallel secure content bootstrapping in content-centric networks

Publication Date: 2018.10.24 CISCO TECHNOLOGY INC

Figure 1
Figure 2
Figure 3

AI summary

One embodiment of the present invention provides a system for retrieving a content collection over a network. During operation, the system determines additional information associated with the piece of content that is needed for consumption of the content collection; generates a plurality of Interests, which includes at least one Interest for a catalog of the content collection and at least one Interest for the additional information; and forwards, concurrently, the plurality of Interests, thereby facilitating parallel retrieval of the content collection and the additional information.