First Steps in Exploring Pervasive Persistent Identification for Information Centric Networking

探索信息中心网络普遍持久识别的第一步

• 批准号: 1255761
• 负责人: Karen Sollins
• 金额: $ 8.94万
• 依托单位: Massachusetts Institute of Technology
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-09-15 至 2014-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1255761&HistoricalAwards=false
• 关键词: First; Steps; Exploring; Pervasive; Persistent

Information Centric Networking (ICN) is a new networking architectural paradigm in which information rather than packets (units of transmission) are given primacy. This concept is central to several of the NSF's recent Future Internet Architecture projects as well as other US based and international projects. The paradigm is transformational because the objective is not to move bits from one place to another but rather to provide access to information, without regard to location. Hence at the core of an information or content centric networking design is identifiers. This research focuses on identifiers and the system that services them. In this EAGER proposal, the PI plans on a set of first steps in validation and evaluation of a design for identity management that supports both persistence and pervasiveness of identifiers. The plan is that this capability can reside on top of any one of the approaches to ICN. Thus, this identification approach can provide effective persistence and pervasiveness and can be translated into current ICN identifiers, which generally are intended for delivery of bits in a location-independent way.The project is to validate and evaluate the effectiveness of providing an indirection layer on top of two of the current ICN projects that are significantly different from each other. The demonstration of validity will focus specifically on persistence and minimization of opportunities denial of service attacks, two capabilities not supported in the ICNs themselves. The requirement for persistence of identifiers and identification management is critical to supporting longevity of the information itself. Mitigation of denial-of-service attacks is selected as the second challenge for two reasons. First, denial-of-service attacks are only possible in pervasive systems, in which attacks can be coordinated widely across a system. Second, one of the key questions across the set of ICN projects is the security and integrity of the infrastructure. All these systems support end-to-end integrity, privacy, confidentiality, but none focuses on the security of the infrastructure that is providing that end-to-end service. Hence denial of service attack mitigation has been selected as the second challenge for this project.This project is a necessary proof of concept setting the stage for a larger effort to explore a whole Pervasive Persistent Identification System (PPInS). At the core of the design is a set of idspaces that are distinct in several ways: the id syntax they support, the management of ids (such as assignment and resolution of them) and the security they provide. Each will translate a globally unique, persistent identifier into the identifiers of the underlying ICN. A global resolution scheme will map each id to the appropriate idspace management facility. In this preliminary work, the researchers will design one of those idspaces and evaluate it on top of two of the competing ICN approaches, for validity and evaluation. The contributions of the larger project can be enumerated by intellectual merit and broader impact.Intellectual Merit: The proposed clean separation of identification from the supporting ICN layers, if successful, will result in three specific contributions: the persistence and ubiquity of identification, achieved through isolation and layering; the extensibility and evolvability of approaches to identification to meet varying performance, security, and scalability requirements through modularity within the identification layer; and the extension of the end-to-end principle over time by recognizing the separation of identification from the activities of location independent expressions of interesting and delivery including differentiated end-to-end and infrastructure security.Broader Impact: There are three central broader impacts of this work: the role and support of persistent information (Independent of information centric networking, as the Internet continues to expand in its role and influence on economic, civic, and military/intelligence components of contemporary society?the value of information is not only in its short term effect, but in the persistence over extremely long periods of time); the education and training of women (The PI is a woman and has consistently supported and will continue to support young women in science, through her research. ) and international collaboration (This work is part of a productive research collaboration between MIT and the University of Cambridge, specifically the leadership of the PURSUIT ICN project.)

信息中心网络（ICN）是一种新的网络架构范例，其中信息而不是数据包（传输单元）被赋予首要地位。 这一概念是 NSF 最近的几个未来互联网架构项目以及其他美国和国际项目的核心。 该范式是变革性的，因为目标不是将比特从一个地方移动到另一个地方，而是提供对信息的访问，而不考虑位置。 因此，以信息或内容为中心的网络设计的核心是标识符。 这项研究的重点是标识符和为其提供服务的系统。 在此 EAGER 提案中，PI 计划验证和评估支持标识符持久性和普遍性的身份管理设计的一系列首要步骤。 计划是该功能可以驻留在任何一种 ICN 方法之上。 因此，这种识别方法可以提供有效的持久性和普遍性，并且可以转换为当前的 ICN 标识符，这些标识符通常旨在以与位置无关的方式传送比特。该项目旨在验证和评估在 ICN 上提供间接层的有效性。当前两个 ICN 项目的顶部彼此显着不同。有效性的演示将特别关注持续性和最小化拒绝服务攻击的机会，这两项功能在 ICN 本身中并不支持。标识符持久性和身份管理的要求对于支持信息本身的寿命至关重要。选择缓解拒绝服务攻击作为第二个挑战有两个原因。首先，拒绝服务攻击只可能发生在普遍系统中，其中攻击可以在整个系统中广泛协调。其次，ICN 项目的关键问题之一是基础设施的安全性和完整性。所有这些系统都支持端到端的完整性、隐私性、机密性，但没有一个系统关注提供端到端服务的基础设施的安全性。因此，拒绝服务攻击缓解已被选为该项目的第二个挑战。该项目是必要的概念验证，为探索整个普遍持久识别系统 (PPInS) 的更大努力奠定了基础。设计的核心是一组 idspace，它们在几个方面都有所不同：它们支持的 id 语法、id 的管理（例如它们的分配和解析）以及它们提供的安全性。 每个都会将全球唯一的持久标识符转换为底层 ICN 的标识符。 全局解析方案会将每个 id 映射到适当的 idspace 管理工具。 在这项初步工作中，研究人员将设计其中一个 idspace，并在两种竞争的 ICN 方法之上对其进行评估，以进行有效性和评估。 较大项目的贡献可以通过智力价值和更广泛的影响来列举。智力价值：所提议的将识别与支持的 ICN 层完全分离，如果成功，将产生三个具体贡献：识别的持久性和普遍性，通过以下方式实现：隔离和分层；识别方法的可扩展性和演进性，通过识别层内的模块化来满足不同的性能、安全性和可扩展性要求；随着时间的推移，通过认识到身份识别与独立于位置的兴趣表达和交付活动的分离，端到端原则的扩展，包括差异化的端到端和基础设施安全。 更广泛的影响：有三个主要的更广泛的影响这项工作的重点：持久信息的作用和支持（独立于以信息为中心的网络，随着互联网在当代社会的经济、公民和军事/情报组成部分的作用和影响力不断扩大？信息的价值不仅在于就其短期效果而言，但是在极长的时间内持续存在）； 女性的教育和培训（PI 是一名女性，通过她的研究一直支持并将继续支持科学界的年轻女性。）和国际合作（这项工作是麻省理工学院和大学之间富有成效的研究合作的一部分）剑桥，特别是 PURSUIT ICN 项目的领导。）