Abstract: A network node, comprising a receiver configured to receive a request for a service, wherein the request comprises a hierarchically structured name comprising a root and a suffix, a data storage component comprising a network synchronized policy rule associated with a service name root, wherein the network synchronized policy rule is applied to any request for a service whose name comprises a root matching the service name root, and a processor coupled to the receiver and to the data storage component, wherein the processor is configured to apply the network synchronized policy rule to the request, wherein the processor is configured to synchronize service definitions and service policies with other nodes in a network based on the name of the service, and wherein the network synchronized policy rule is synchronized with the other nodes in the network using name-based routing.

Abstract: Various disclosed embodiments include methods, systems, and computer-readable media for named data network (NDN) inter/intra-domain mobility. A complete de-coupling of identity and addressing space is established. This provides separation of control and forwarding allowing rich policy based routing, using SDN principles, as well as policy based global resolution. In one embodiment, the de-coupling of identity from location is achieved by a changeable forwarding label field in a header that can have nodal/domain/global scope. This disclosure provides content routing/mobility to be handled with a high degree of flexibility. This disclosure also provides mobility as a service for a component of a name space.

Abstract: A method implemented by an edge node in an optical network, the method comprising receiving one or more information centric networking (ICN) service flows, each of which is identifiable by a service label, determining at least one optical resource to be provisioned to the one or more service flows based on the one or more service labels, converting the one or more ICN service flows to one or more optical flows, and transmitting the one or more optical flows using the at least one optical resource.

Abstract: A network enabled computer system includes a processor and a dual stack communication module to couple to a network. The dual stack communication module includes information centric network layers and a secure network connection layer, each coupled to an IP connection layer to couple to a network. A storage device is coupled to the processor to cause the processor to execute operations to route IP packets. The operations include establishing a secure connection using the secure connection layer, performing authentication via the secure connection using the secure connection layer, exchanging an encryption key via the secure connection using the secure connection layer, and transferring encrypted chunks of data using information centric network IP-content packets via the information centric network layers.

Abstract: A method implemented in a network element (NE) configured to operate in an information centric network (ICN), the method comprising creating a minimum spanning tree for an overlay cluster to which the NE is assigned within a host domain, wherein the minimum spanning tree comprises a root corresponding to the NE and a plurality of member nodes assigned to the overlay cluster; and broadcasting a hash cluster setup (HCS) message to the member nodes, wherein the HCS message comprises source path routing information for the overlay cluster and hop limit values corresponding to distances within the ICN between the NE and each of the member nodes.

Abstract: A method for video streaming over at least one information-centric network (ICN), comprising transmitting a request for video content to a server, receiving a media presentation description (MPD) file corresponding to the video content from the server in response to the request for the video content, wherein the MPD file identifies names of copies of the video content in the at least one ICN, and wherein the copies of the video content represent different quality levels of the video content, probing the at least one ICN for the copies of the video content by searching the names of the copies, calculating a probability for each of the copies of the video content based on results of the probing, and fetching one of the copies of the video content based on the probability calculated for each of the copies of the video content.

Abstract: A method implemented in a network element (NE) configured to operate in an information centric network (ICN), comprising receiving an Interest packet through an interface, wherein the Interest packet comprises an in-packet bloom filter and at least one counting filter associated with an element of the in-packet bloom filter; determining an outbound interface to forward the Interest packet to a next hop in the ICN; selecting a local bloom filter based on a mapping of the interface to the local bloom filter; updating a value for the in-packet bloom filter based on a product determined by a bitwise OR operation of the local bloom filter and the in-packet bloom filter; incrementing the at least one counting filter based on a change to the associated element of the in-packet bloom filter; updating the in-packet bloom filter in the Interest packet; updating the at least one counting filter in the Interest packet; and forwarding the Interest packet through the outbound interface.

Abstract: Various disclosed embodiments include methods, systems, and computer-readable media for named data network (NDN) inter/intra-domain mobility. A complete de-coupling of identity and addressing space is established. This provides separation of control and forwarding allowing rich policy based routing, using SDN principles, as well as policy based global resolution. In one embodiment, the de-coupling of identity from location is achieved by a changeable forwarding label field in a header that can have nodal/domain/global scope. This disclosure provides content routing/mobility to be handled with a high degree of flexibility. This disclosure also provides mobility as a service for a component of a name space.

Abstract: A method for pushing data in a Content-Centric Networking (CCN) network comprises receiving a message from a source at an input interface device of a node device in the CCN network, the node device executing a CCN protocol. A determination is made that the received message is an interest-notification message. The received message is identified as the interest-notification message by including a Type field, a Content Name field, and a Cacheable Object field. The Type field indicates that the received message is pushing data within the CCN network. The Content Name field associates a hierarchical name to the data being pushed within the CCN network. The Cacheable Object field includes a cacheable object representing the data being pushed within the CCN network. The cacheable object is extracted in response to the received message being an interest-notification message. The cacheable object is placed in a cache at the node device.

Abstract: A method implemented in a content node configured to operate in an information centric network (ICN) comprising allocating each of a plurality of memory spaces coupled to a processor exclusively to a particular thread from a plurality of threads allocated in the processor, wherein the processor is in a content node; assigning each of a plurality of namespaces at a defined level exclusively to one of the particular threads from the plurality of threads based on an assignment algorithm; and partitioning entries from a Forwarding Information Base (FIB) table, wherein the entries map content names to ports on the content node, wherein each entry is partitioned in a FIB sub-table to the memory space allocated to the one of the particular threads associated with the namespace corresponding to the content name contained within the entry.

Abstract: Computer-implemented methods, computer software, and computer systems for handling consumer mobility in an information-centric networks (ICN). A pending interest table (PIT) including one or more PIT entries is maintained by an attachment point (AP) of a user equipment (UE) in the ICN. Each PIT entry identifies unsatisfied data requested by the UE. The data requested by the UE are specified in one or more interest packets that were previously received by the AP. An interest packet is received at the AP. The interest packet includes an identifier (ID) of a UE and a name of data that the UE requests. A PIT entry is identified by the AP. The PIT entry includes the name of the data requested by the UE in the interest packet. An index mapping the UE to the PIT entry is generated by the AP based on the ID of the UE.

Abstract: Various disclosed embodiments include methods, systems, and computer-readable media for named data network (NDN) inter/intra-domain mobility. A complete de-coupling of identity and addressing space is established. This provides separation of control and forwarding allowing rich policy based routing, using SDN principles, as well as policy based global resolution. In one embodiment, the de-coupling of identity from location is achieved by a changeable forwarding label field in a header that can have nodal/domain/global scope. This disclosure provides content routing/mobility to be handled with a high degree of flexibility. This disclosure also provides mobility as a service for a component of a name space.

Abstract: A content router, comprising a plurality of physical links to other nodes in an information centric network, a receiver coupled to the plurality of physical links configured to receive messages, a transmitter coupled to the plurality of physical links configured to transmit messages, and a service publishing and discovery (SPD) module comprising a processor and memory device coupled to the receiver and to the transmitter, wherein the SPD is configured to store status updates of the physical links, wherein the SPD is configured to determine a next hop and a number of hops to forward a received message based on a prefix in a name-based service discovery protocol name of a received message.

Abstract: An apparatus comprising a memory and a processor coupled to the memory, wherein the memory contains instructions that when executed by the processor cause the apparatus to receive a migration request from a virtual machine (VM) proxy running on a first server hosting a VM, wherein the migration request comprises a VM identifier associated with the VM comprising a globally unique VM name and a current VM address associated with the first server, and wherein data packets associated with the VM are routed to the VM based upon the VM identifier and instruct a VM proxy running on a second server to receive the VM from the first server in response to the migration request, wherein the second server receives the VM, and wherein the VM name remains unchanged while the current VM address becomes associated with the second server after the second server receives the VM.

Abstract: A network element (NE) comprising a receiver configured to receive a flow configuration message from a network controller via an information centric network (ICN), wherein the flow configuration message comprises a flow entry that identifies a flow in the ICN, wherein the flow is associated with a name of an application data object, and wherein the flow entry comprises a forwarding path associated with an application corresponding to the application data object name, and receive a packet, via the ICN, comprising the application data object name, a processor coupled to the receiver and configured to select the flow entry from a flow table based on the packet's application data object name, and a transmitter coupled to the processor and configured to forward the packet along the forwarding path in the selected flow entry.

Abstract: A network component comprising a receiver configured to receive an advertisement for a content name for content associated with a list of secured router identifiers (SRIDs) that indicates a plurality of content routers authorized for routing and caching the content, a processor configured to determine whether to flood the advertisement to a plurality of neighboring nodes if a locally assigned SRID is included in the list of SRIDs received in the advertisement or to drop the advertisement otherwise, a transmitter configured to flood the advertisement on a plurality of ports coupled to the neighboring nodes, and a storage configured to cache received content if the received content is associated with the locally assigned SRID.

Abstract: A router, and a method of routing an interest packet having multiple nonces in NDN to eliminate stale PIT entries. The method includes a consumer device initially sending an interest packet having a first nonce within a protocol data unit (PDU), the interest packet having a second nonce. A router receives the interest packet and creates a pending interest table (PIT) entry. The consumer device resends the interest packet, the router keeping a single PIT entry per consumer device and using the second nonce to clear PIT entries corresponding to the initial transmission of the consumer device. The first nonce is indicative of requested content from the producer device, and the second nonce is indicative of the consumer device.

Abstract: Various disclosed embodiments include methods, systems, and computer-readable media for named data network (NDN) inter/intra-domain mobility. A complete de-coupling of identity and addressing space is established. This provides separation of control and forwarding allowing rich policy based routing, using SDN principles, as well as policy based global resolution. In one embodiment, the de-coupling of identity from location is achieved by a changeable forwarding label field in a header that can have nodal/domain/global scope. This disclosure provides content routing/mobility to be handled with a high degree of flexibility. This disclosure also provides mobility as a service for a component of a name space.

Abstract: A networking system comprising a virtual group controller in an information centric network configured to enable mobility and security for a plurality of users groups of the information centric network, a plurality of user groups coupled to the virtual group controller and associated with the users, a plurality of agents that are each associated with one of the user groups, and a database for trusted service profile coupled to the virtual group controller, wherein the virtual group controller is configured to interact with the agents to enable mobility for the user groups using a server-less domain-based naming scheme.

Abstract: A data device controls distribution of data to user devices through an edge router via an encryption scheme. The data device encrypts data using a first key and a public key, and sends the data to the edge router. The edge router encrypts the encrypted data with a second key and sends the re-encrypted data to a user device. The data device then authenticates the user device and issues a decryption key derived from a private key corresponding to the public key, the first key, and the second key to the user device. The user device uses the decryption key to decrypt and access the data.