Virtual Group Controller for ICN Security and Mobility
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Information Centric Networks (ICNs), existing technologies face challenges in managing domain-based security and mobility efficiently, particularly in Content Oriented Networks (CONs), where traditional IP networks' address-based systems differ from name-based systems, leading to complexities in content routing, security, and user mobility.
Innovation Solution
A SMVG control system is introduced, utilizing a virtual group controller with a server-less domain-based naming scheme to enable mobility and security for user groups, allowing for dynamic management of trusted service profiles and inter-domain operations, supporting security, mobility, and social networking capabilities through a domain-based naming structure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional IP address-based systems are used in Content Oriented Networks, then network connectivity and routing are established, but domain-based security and user mobility management become complex and inefficient
Solution Approach 1:
The patent introduces a Virtual Group Controller (VGC) as an intermediary component that mediates between user groups and the network infrastructure. The VGC manages trusted service profiles and handles security authentication, while also tracking user group locations for mobility management. This intermediary architecture separates security and mobility management functions from traditional IP routing, reducing overall system complexity while improving reliability of domain-based security.
Solution Approach 2:
The patent segments the network management functions by introducing agents at different network levels (content routers, edge routers) and a central VGC. Each agent handles local security and mobility tasks, while the VGC provides centralized coordination. This segmentation divides the complex security and mobility management into manageable distributed components, reducing the burden on any single element and improving overall system reliability.
2Productivity
If name-based systems are implemented for content routing, then content delivery efficiency is improved, but integration with traditional security and mobility management frameworks becomes difficult
Solution Approach 1:
The VGC is designed as a universal controller that handles multiple functions: it manages trusted service profiles for security authentication, tracks user group locations for mobility management, and interfaces with both name-based content routing and traditional IP-based networks. This multi-functional design enables seamless integration between name-based content routing efficiency and traditional security frameworks, allowing the system to leverage benefits of both approaches.
Solution Approach 2:
The VGC acts as an intermediary layer that translates between name-based content identifiers and traditional security/mobility management protocols. When content requests arrive with names, the VGC resolves them to appropriate user groups and applies security policies, while maintaining compatibility with existing network infrastructure. This intermediary function enables name-based routing efficiency without sacrificing integration capabilities with traditional frameworks.
3Ease of operation
If user mobility is supported in ICN, then user flexibility and service continuity are enhanced, but tracking and managing user locations across domains increases system complexity
Solution Approach 1:
The VGC serves as a centralized intermediary for mobility management, maintaining a database of user group locations across different domains. When users move between domains, their agents update the VGC with new location information. The VGC then routes subsequent content requests to the correct domain based on current location data. This centralized mediation simplifies location tracking compared to distributed peer-to-peer location management, enhancing user mobility while controlling system complexity.
Solution Approach 2:
User group agents are equipped with self-service capabilities to automatically register their locations with the VGC and update their own mobility status. When a user group moves to a new domain, its agent autonomously performs registration and location updates without requiring manual intervention or complex centralized control. This self-service approach enhances user mobility ease of operation while reducing the burden on the VGC and overall system complexity.
Data Source
AI summary
A networking system comprising a virtual group controller in an information centric network configured to enable mobility and security for a plurality of users groups of the information centric network, a plurality of user groups coupled to the virtual group controller and associated with the users, a plurality of agents that are each associated with one of the user groups, and a database for trusted service profile coupled to the virtual group controller, wherein the virtual group controller is configured to interact with the agents to enable mobility for the user groups using a server-less domain-based naming scheme.