Probabilistic lazy-forwarding technique without validation in a content centric network
View Patent ↗A network node can use reputation values to determine when to forego validating a cached Content Object's authenticity. During operation, the network node can receive an Interest over a Content Centric Network (CCN). If the Content Store includes a matching Content Object that satisfies the Interest, the node obtains the cached Content Object. The node then determines whether the Interest includes a validation token that is to be used to validate the Content Object's authenticity. If so, the node determines a reputation value for the Content Object, such that the reputation value indicates a likelihood that validation of the Content Object's authenticity will be successful. If the network node determines that the reputation value exceeds a predetermined threshold, the node returns the Content Object without validating the Content Object's authenticity.
1. A computer-executable method, comprising:
receiving an Interest by a computing device;
obtaining a cached Content Object that satisfies the Interest;
determining a reputation value for the Content Object based on reputation information, wherein the reputation information includes a success rate for verifying a signature for a name prefix from an interface, a number of times that a node has successfully verified signatures for Content Objects for a face, or a number of times a node has received the same Interest; and
responsive to determining that a reputation value exceeds a predetermined threshold, returning the Content Object without validating the Content Object's authenticity.
2. The method of claim 1 , further comprising:
determining that the Interest includes a validation token that is to be used to validate the Content Object's authenticity, wherein the validation token includes at least one of:
a publisher key identifier; and
a hash value for the Content Object.
3. The method of claim 1 , further comprising:
responsive to determining that the reputation value is below a lower threshold value:
evicting the Content Object from a Content Store; and
forwarding the Interest toward a publisher for a name or name prefix of the Interest.
4. The method of claim 1 , further comprising:
responsive to determining that the reputation value is greater than a predetermined lower threshold and less than a predetermined upper threshold:
obtaining a public key that corresponds to a public key identifier of the Interest; and
validating the Content Object's authenticity.
5. The method of claim 4 , further comprising:
responsive to successfully validating the Content Object's authenticity:
updating attribute values associated with the Content Object to reflect the successful validation; and
returning the Content Object.
6. The method of claim 4 , further comprising:
responsive to a failed validation of the Content Object's authenticity:
evicting the Content Object from a Content Store;
updating the reputation information associated with the Content Object to reflect the failed validation; and
forwarding the Interest toward a publisher of a name or name prefix of the Interest.
7. The method of claim 1 , further comprising:
determining that the reputation value exceeds the predetermined threshold, responsive to determining that the Interest includes a validation token that is to be used to validate the Content Object's authenticity.
8. The method of claim 1 , further comprising:
responsive to determining that the Interest does not include a validation token, returning the Content Object without validating the Content Object's authenticity.
9. A non-transitory computer-readable storage medium storing instructions which when executed by a computer cause the computer to perform a method, the method comprising:
receiving an Interest;
obtaining a cached Content Object that satisfies the Interest;
determining a reputation value for the Content Object based on reputation information, wherein the reputation information includes a success rate for verifying a signature for a name prefix from an interface, a number of times that a node has successfully verified signatures for Content Objects for a face, or a number of times a node has received the same Interest; and
responsive to determining that a reputation value exceeds a predetermined threshold, returning the Content Object without validating the Content Object's authenticity.
10. The storage medium of claim 9 , the method further comprising:
determining that the Interest includes a validation token that is to be used to validate the Content Object's authenticity, wherein the validation token includes at least one of:
a publisher key identifier; and
a hash value for the Content Object.
11. The storage medium of claim 9 , the method further comprising:
responsive to determining that the reputation value is below a lower threshold value:
evicting the Content Object from a Content Store; and
forwarding the Interest toward a publisher for a name or name prefix of the Interest.
12. The storage medium of claim 9 , the method further comprising:
responsive to determining that the reputation value is greater than a predetermined lower threshold and less than a predetermined upper threshold:
obtaining a public key that corresponds to a public key identifier of the Interest; and
validating the Content Object's authenticity.
13. The storage medium of claim 12 , the method further comprising:
responsive to successfully validating the Content Object's authenticity:
updating attribute values associated with the Content Object to reflect the successful validation; and
returning the Content Object.
14. The storage medium of claim 12 , the method further comprising:
responsive to a failed validation of the Content Object's authenticity:
evicting the Content Object from a Content Store;
updating the reputation information associated with the Content Object to reflect the failed validation; and
forwarding the Interest toward a publisher of a name or name prefix of the Interest.
15. The storage medium of claim 9 , the method further comprising:
determining that the reputation value exceeds the predetermined threshold, responsive to determining that the Interest includes a validation token that is to be used to validate the Content Object's authenticity.
16. The storage medium of claim 9 , the method further comprising:
responsive to determining that the Interest does not include a validation token, returning the Content Object without validating the Content Object's authenticity.
17. A computing system, comprising:
one or more processors; and
a computer-readable medium coupled to the one or more processors storing instructions stored that, when executed by the one or more processors, cause the computing system to perform a method comprising
receiving an Interest;
obtaining a cached Content Object that satisfies the Interest;
determining a reputation value for the Content Object based on reputation information, wherein the reputation information includes a success rate for verifying a signature for a name prefix from an interface, a number of times that a node has successfully verified signatures for Content Objects for a face, or a number of times a node has received the same Interest; and
responsive to determining that a reputation value exceeds a predetermined threshold, returning the Content Object without validating the Content Object's authenticity.
18. The computing system of claim 17 , wherein the method further comprises:
determining that the Interest includes a validation token that is to be used to validate the Content Object's authenticity, and the validation token includes at least one of:
a publisher key identifier; and
a hash value for the Content Object.
19. The computing system of claim 17 , wherein the method further comprises:
responsive to determining that the reputation value is below a lower threshold value:
evicting the Content Object from a Content Store; and
forwarding the Interest toward a publisher for a name or name prefix of the Interest.
20. The computing system of claim 17 , wherein the method further comprises:
responsive to determining that the reputation value is greater than a predetermined lower threshold and less than a predetermined upper threshold:
obtaining a public key that corresponds to a public key identifier of the Interest; and
validating the Content Object's authenticity.
21. The computing system of claim 20 , wherein the method further comprises:
responsive to successfully validating the Content Object's authenticity:
updating attribute values associated with the Content Object to reflect the successful validation; and
returning the Content Object.
22. The computing system of claim 20 , wherein the method further comprises:
responsive to a failed validation of the Content Object's authenticity:
evicting the Content Object from a Content Store;
updating the reputation information associated with the Content Object to reflect the failed validation; and
forwarding the Interest toward a publisher of a name or name prefix of the Interest.
23. The computing system of claim 17 , wherein the method further comprises:
determining that the reputation value exceeds the predetermined threshold, responsive to determining that the Interest includes a validation token that is to be used to validate the Content Object's authenticity.
24. The computing system of claim 17 , wherein the method further comprises:
responsive to determining that the Interest does not include a validation token, returning the Content Object without validating the Content Object's authenticity.