SYSTEM, METHOD AND APPARATUS PROVIDING ADDRESS INVISIBILITY TO CONTENT PROVIDER/SUBSCRIBER
A method and apparatus for scalably and securely providing address invisibility to a content provider over a network. In various embodiments, the content provider determines the closest geographic rendezvous point node to store content, such that each of the geographic regions may have associated with it one or more nodes, which provide content to a subscriber without directory service to thereby provide address invisibility to the content provider and also the content consumer.
1 . A method for distributing content, comprising:
receiving a request to join a topic group, said request including characteristics associated with a topic of interest, requester identifier and requester geographic location;
transmitting toward the requester an identifier of a topic group associated with the topic of interest;
receiving indication of requester authentication, said indication being adapted to populate respective topic database;
receiving message content including the topic group identifier associated with of the topic interest; and
caching the topic of interest message at a host.
2 . The method of claim 1 , wherein geographic location is determined for a topic group using a distributed hash function.
3 . The method of claim 1 , wherein for a geographic location associated with a particular topic group a host closest to the location becomes a primary rendezvous point (RP) for the topic group.
4 . The method of claim 3 , wherein for a geographic location associated with a particular topic group a host that is second closest to the location becomes a secondary RP node for the topic group upon unavailability of the primary RP.
5 . The method of claim 1 , wherein nodes incident on a triangle enclosing the primary RP are replicas of said primary RP.
6 . The method of claim 1 , wherein the request to join further includes the identifier of the requester and geographic location.
7 . The method of claim 1 , wherein the response to join further includes the identifier of the content publisher.
8 . The method of claim 1 , further comprising waiting for authentication of said requester.
9 . The method of claim 8 , wherein the requester obtains authentication from a trusted server.
10 . The method of claim 1 , wherein the authentication response further includes a credential and identifier of the content publisher.
11 . The method of claim 1 , further comprising transmitting cached topic of interest messages to the requester.
12 . The method of claim 4 , wherein the primary RP sends toward the secondary node updated data.
13 . A method for providing content to a subscriber over a network, comprising:
receiving a request to join a topic group including characteristics associated with a topic of interest, requester identifier and geographic location;
transmitting toward the requester an identifier of a topic group associated with the topic of interest;
receiving indication of requester authentication, said indication being adapted to populate respective topic database;
providing the topic of interest message content to the subscriber over a secure data-centric application extension platform (SeDAX).
14 . The method of claim 13 , wherein the request to join further includes the identifier of the subscriber and geographic location.
15 . The method of claim 14 , further comprising authenticating said subscriber.
16 . The method of claim 15 , wherein subscriber authentication is provided via a trusted server.
17 . The method of claim 13 , wherein a geographic location is determined for a topic group using a distributed hash function.
18 . The method of claim 13 , wherein for a geographic location associated with a particular topic group a host closest to the location becomes a primary rendezvous point (RP) for the topic group.
19 . An apparatus for hosting a secure data-centric application extension platform (SeDAX) over a network, comprising:
a processor adapted to perform a plurality of SeDAX functions using a SeDAX middleware suite and a SeDAX host suite;
the SeDAX middleware suite enabling communications with one or more end users such as publishers or subscribers;
the SeDAX host suite enabling communications with other SeDAX middleware suites and other SeDAX host suites to thereby implement a SeDAX network including one or more trusted servers;
wherein a SeDAX host proximate a determined location becomes a rendezvous point between publishers and subscribers thereby providing address invisibility.
20 . A computer program product for scalably and securely requesting content over a network using a secure data-centric application extension platform (SeDAX) adapted to locate a content of provider or publisher without directory service, the computer program product being embodied in a non-transitory computer readable medium storing thereon computer instructions for:
implementing distributed storage capability over a SeDAX network;
providing fine-grained topic or role based access control; and
implementing self-healing and self-configuration capability of the SeDAX network;
wherein the SeDAX network comprises one or more nodes in communication, each of said one or more nodes a SeDAX host suite.