First Steps in Exploring Pervasive Persistent Identification for Information Centric Networking

探索信息中心网络普遍持久识别的第一步

• 批准号: 1255761
• 负责人: Karen Sollins
• 金额: $ 8.94万
• 依托单位: Massachusetts Institute of Technology
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-09-15 至 2014-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1255761&HistoricalAwards=false
• 关键词: First; Steps; Exploring; Pervasive; Persistent

Information Centric Networking (ICN) is a new networking architectural paradigm in which information rather than packets (units of transmission) are given primacy. This concept is central to several of the NSF's recent Future Internet Architecture projects as well as other US based and international projects. The paradigm is transformational because the objective is not to move bits from one place to another but rather to provide access to information, without regard to location. Hence at the core of an information or content centric networking design is identifiers. This research focuses on identifiers and the system that services them. In this EAGER proposal, the PI plans on a set of first steps in validation and evaluation of a design for identity management that supports both persistence and pervasiveness of identifiers. The plan is that this capability can reside on top of any one of the approaches to ICN. Thus, this identification approach can provide effective persistence and pervasiveness and can be translated into current ICN identifiers, which generally are intended for delivery of bits in a location-independent way.The project is to validate and evaluate the effectiveness of providing an indirection layer on top of two of the current ICN projects that are significantly different from each other. The demonstration of validity will focus specifically on persistence and minimization of opportunities denial of service attacks, two capabilities not supported in the ICNs themselves. The requirement for persistence of identifiers and identification management is critical to supporting longevity of the information itself. Mitigation of denial-of-service attacks is selected as the second challenge for two reasons. First, denial-of-service attacks are only possible in pervasive systems, in which attacks can be coordinated widely across a system. Second, one of the key questions across the set of ICN projects is the security and integrity of the infrastructure. All these systems support end-to-end integrity, privacy, confidentiality, but none focuses on the security of the infrastructure that is providing that end-to-end service. Hence denial of service attack mitigation has been selected as the second challenge for this project.This project is a necessary proof of concept setting the stage for a larger effort to explore a whole Pervasive Persistent Identification System (PPInS). At the core of the design is a set of idspaces that are distinct in several ways: the id syntax they support, the management of ids (such as assignment and resolution of them) and the security they provide. Each will translate a globally unique, persistent identifier into the identifiers of the underlying ICN. A global resolution scheme will map each id to the appropriate idspace management facility. In this preliminary work, the researchers will design one of those idspaces and evaluate it on top of two of the competing ICN approaches, for validity and evaluation. The contributions of the larger project can be enumerated by intellectual merit and broader impact.Intellectual Merit: The proposed clean separation of identification from the supporting ICN layers, if successful, will result in three specific contributions: the persistence and ubiquity of identification, achieved through isolation and layering; the extensibility and evolvability of approaches to identification to meet varying performance, security, and scalability requirements through modularity within the identification layer; and the extension of the end-to-end principle over time by recognizing the separation of identification from the activities of location independent expressions of interesting and delivery including differentiated end-to-end and infrastructure security.Broader Impact: There are three central broader impacts of this work: the role and support of persistent information (Independent of information centric networking, as the Internet continues to expand in its role and influence on economic, civic, and military/intelligence components of contemporary society?the value of information is not only in its short term effect, but in the persistence over extremely long periods of time); the education and training of women (The PI is a woman and has consistently supported and will continue to support young women in science, through her research. ) and international collaboration (This work is part of a productive research collaboration between MIT and the University of Cambridge, specifically the leadership of the PURSUIT ICN project.)

以信息为中心的网络（ICN）是一种新的网络架构范式，其中信息而不是数据包（传输单位）至关重要。 这个概念是NSF最近未来的互联网架构项目以及其他基于美国和国际项目的核心。 范式具有变革性，因为目标不是将位从一个地方移动到另一个地方，而是要提供信息的访问，而无需考虑位置。 因此，信息或以内容为中心的网络设计的核心是标识符。 这项研究重点是标识符和为其服务的系统。 在此急切的建议中，PI计划在验证和评估身份管理设计方面的第一步，以支持标识符的持久性和普遍性。 计划是该功能可以驻留在ICN的任何一种方法之上。 因此，这种识别方法可以提供有效的持久性和普遍性，并可以转化为当前的ICN标识符，这些标识符通常用于以独立于位置的方式交付位。该项目是验证和评估在当前两个ICN项目顶部提供间接层的有效性，这些项目有很大不同。有效性的演示将专门集中于持续性和最小化拒绝服务攻击的机会，这是ICN本身不支持的两种能力。持久性和识别管理的要求对于支持信息本身的寿命至关重要。缓解拒绝服务攻击的原因是第二个挑战，原因有两个。首先，只有在普遍的系统中才有可能进行拒绝服务攻击，在该系统中，可以在系统中广泛协调攻击。第二，整个ICN项目的关键问题之一是基础架构的安全性和完整性。所有这些系统都支持端到端完整性，隐私，机密性，但没有一个集中于提供端到端服务的基础架构的安全性。因此，拒绝服务攻击缓解措施是该项目的第二个挑战。该项目是概念的必要证明，为更大的努力奠定了基础，以探索整个普遍存在的持久识别系统（PPIN）。设计的核心是一组ID空间，它们在几种方面具有不同的方式：它们支持的ID语法，ID的管理（例如分配和分辨率）及其提供的安全性。 每个都会将全球独特的，持久的标识符转化为基础ICN的标识符。 全球分辨率方案将将每个ID映射到适当的IDSPACE管理设施。 在这项初步工作中，研究人员将设计其中一个ID空间，并以两种竞争性ICN方法进行评估，以进行有效性和评估。 智能优点和更广泛的影响可以列举较大项目的贡献。智能优点：如果成功的话，提议的清洁识别与支持ICN层的清洁分离将产生三个具体的贡献：通过隔离和分层实现的鉴定的持久性和识别性；识别方法的可扩展性和可进化性通过识别层内的模块化来满足不同的性能，安全性和可伸缩性要求；以及通过认识到识别与位置独立表达和交付的活动的分离，包括差异化和基础设施安全的差异的活动来扩展端到端原则的扩展。公民的影响：这项工作的影响和支持的角色和支持是持续的三个核心影响：信息和互联网的局限性和经济上的局限性和经济影响，并且在互联网上不断扩展，并且在公民中的影响和经济影响，并且是在公民身上的影响，并且是对经济的影响？信息的价值不仅在短期效果上，而且在很长一段时间内的持久性）； 妇女的教育和培训（PI是一名女性，一直支持，并将通过她的研究继续支持科学领域的年轻女性。