Abstract: Various disclosed embodiments include methods, devices and systems establishing secure discovery and secure communication in an ad hoc information-centric network (ICN). An application in a consumer device sends a discovery interest including an associated service name or prefix encrypted by an encryption key using the ICN. A producer device publishing and discovery protocol (SPDP) on an ICN stack of the producer device receives the discovery interest and verifies the consumer device using the encryption key. The producer device SPDP returns a data protocol data unit (PDU) to the consumer device configured to enable the consumer device to access the published service, and the consumer device establishes routing with the producer device and receives the local published service.

Abstract: The present invention relates to a system and method for network performance management for monitoring performance of network applications. The system comprises a transmitter for sending one or more types of probe packets to the network, a receiver for receiving the one or more network probe packets from the network and for receiving one or more network application performance queries from one or more network applications, a processor connected to the transmitter and the receiver and operable to process network probe packets received by the receiver to generate network performance statistics for each type of probe packet and to look up the network application performance requirements of the one or more network applications and compare the network application performance requirements with the corresponding network performance statistics to determine whether the network application should access the network.

Abstract: A method for state based forwarding using an embedded flag in the type length values (TLV) architecture of information centric network (ICN) interfaces, the method comprises storing, in static and dynamic fashions forward information for ICN router interfaces, the stored information is stored in a pending interest table (PIT) table associated with the ICN router interface. Next, using, a flag within the stored information in the TLV architecture of the ICN router interface wherein the flag is associated with an interest capability of the ICN router interface. Further, receiving, an interest associated with flag for forwarding at the ICN router interface, and checking, the received interest with the stored information in the PIT table of the ICN router interface for forwarding to a content source.

Abstract: A method implemented by a network element (NE), comprising obtaining a first mapping between a first content name identifying a content data in a content centric network (CCN) and a first hash value of at least a portion of the first content name, wherein the first content name comprises a character string in a hierarchical namespace, receiving, via a receiver of the NE, an initial packet comprising an initial hash value from the CCN, determining, via a processor the NE, that the initial hash value in the received initial packet matches the first hash value in the obtained first mapping, replacing, via the processor, the initial hash value in the received initial packet with the first content name in the matched first mapping to produce a translated initial packet, and forwarding, via a transmitter of the NE, the translated initial packet comprising the first content name to a connected end host.

Abstract: A networking system comprising a virtual group controller in an information centric network configured to enable mobility and security for a plurality of users groups of the information centric network, a plurality of user groups coupled to the virtual group controller and associated with the users, a plurality of agents that are each associated with one of the user groups, and a database for trusted service profile coupled to the virtual group controller, wherein the virtual group controller is configured to interact with the agents to enable mobility for the user groups using a server-less domain-based naming scheme.

Abstract: A network node in an information centric network (ICN), comprising a receiver configured to receive a request for content from a user, wherein the request comprises a name, wherein the name uniquely identifies the content associated with the name, wherein the name provides persistently locatable routing to the content, wherein the name provides meaning to an application, and wherein the name comprises a security verifier, a processor coupled to the receiver and configured to determine a next hop to which to forward the request based on the name, and a transmitter coupled to the processor and configured to forward the request to the next hop.

Abstract: Various disclosed embodiments include methods, systems, and computer-readable media for named data network (NDN) inter/intra-domain mobility. A complete de-coupling of identity and addressing space is established. This provides separation of control and forwarding allowing rich policy based routing, using SDN principles, as well as policy based global resolution. In one embodiment, the de-coupling of identity from location is achieved by a changeable forwarding label field in a header that can have nodal/domain/global scope. This disclosure provides content routing/mobility to be handled with a high degree of flexibility. This disclosure also provides mobility as a service for a component of a name space.

Abstract: A flow-driven forwarding strategy includes receiving an Interest packet, where the interest packet includes a flow state indicator. The content associated with the Interest packet is checked to determine whether that content is locally stored. Another check is performed to determine whether any previously received Interest packet has requested the content. In response to the content not being locally stored and no related Interest packet has been previously received, the flow state indicator is checked in the Interest packet. In response to the flow state indicator indicating that the Interest packet is associated with an active flow, forwarding information is extracted from a flow state table if a hop count has a value of zero or from the Interest packet if the hop count has a value greater than zero. The Interest packet is then forwarded to a next hop in accordance with the forwarding information.

Abstract: A networking system for a content-centric-network (CCN)/named-data networking (NDN) comprising a first point of attachment (PoA) configured to communicate with a mobile node (MN) and maintain a forwarding state for the MN to support seamless mobility for the MN, and a second PoA configured to communicate with the MN and obtain the forwarding state for the MN from the first PoA after a handoff of the MN from the first PoA to the second PoA, wherein the forwarding state is used to exchange a plurality of interests and a plurality of data responses between the MN and the CCN/NDN.

Abstract: A method implemented by an edge node in an optical network, the method comprising receiving one or more information centric networking (ICN) service flows, each of which is identifiable by a service label, determining at least one optical resource to be provisioned to the one or more service flows based on the one or more service labels, converting the one or more ICN service flows to one or more optical flows, and transmitting the one or more optical flows using the at least one optical resource.

Abstract: Various disclosed embodiments include methods, devices and systems establishing secure discovery and secure communication in an ad hoc information-centric network (ICN). An application in a consumer device sends a discovery interest including an associated service name or prefix encrypted by an encryption key using the ICN. A producer device publishing and discovery protocol (SPDP) on an ICN stack of the producer device receives the discovery interest and verifies the consumer device using the encryption key. The producer device SPDP returns a data protocol data unit (PDU) to the consumer device configured to enable the consumer device to access the published service, and the consumer device establishes routing with the producer device and receives the local published service.

Abstract: Various disclosed embodiments include methods, systems, and computer-readable media for named data network (NDN) inter/intra-domain mobility. A complete de-coupling of identity and addressing space is established. This provides separation of control and forwarding allowing rich policy based routing, using SDN principles, as well as policy based global resolution. In one embodiment, the de-coupling of identity from location is achieved by a changeable forwarding label field in a header that can have nodal/domain/global scope. This disclosure provides content routing/mobility to be handled with a high degree of flexibility. This disclosure also provides mobility as a service for a component of a name space.

Abstract: An internet protocol (IP) content router, comprising a forwarding information base (FIB) engine comprising a data store comprising forwarding instructions, an IP packet classifier comprising a processor configured to classify a first incoming IP packet as an information centric networking (ICN) packet and a second incoming IP packet as a non-ICN packet, and an IP packet processor comprising a processor, wherein the IP packet processor is coupled to the FIB engine and to the IP packet classifier, wherein the IP packet processor is configured to intercept the ICN packet for further ICN processing in the IP content router, consult the FIB engine for forwarding instructions for the non-ICN packet, and forward the non-ICN packet according to the forwarding instructions.

Abstract: An apparatus comprising a memory, a processor coupled to the memory, wherein the memory contains instructions that when executed by the processor cause the apparatus to receive an information centric network (ICN) name prefix announcement message comprising a message prefix specific to a publisher, a public key certificate specific to the content publisher, and a signature specific to the content publisher, verify the signature with a name registration service (NRS), and update internal data indicating that the content publisher is a trusted publisher, wherein the internal data comprises the prefix, the public key, and the signature.

Abstract: Domains (multiple collaborating service providers) create service offerings between pairs of edge nodes that interconnect with other domains in the network. The service offerings may specify the available bandwidth, quality of service, reliability, available security, price, subscriber and service contextual specific and other SLA information. When a new service is to be created, the service definition is used along with information about the available service offerings to determine a set of networks to implement the service. Information associated with the service offerings may be flooded to all other networks. Alternatively, the service offering information may be provided to a trusted third party (SLA broker) which may provide SLA services on the network to select sets of domains to implement inter-domain services, and may also proxy to set up the service for the SLA requesting party. A hybrid approach may also be used.

Abstract: Domains (multiple collaborating service providers) create service offerings between pairs of edge nodes that interconnect with other domains in the network. The service offerings may specify the available bandwidth, quality of service, reliability, available security, price, subscriber and service contextual specific and other SLA information. When a new service is to be created, the service definition is used along with information about the available service offerings to determine a set of networks to implement the service. Information associated with the service offerings may be flooded to all other networks. Alternatively, the service offering information may be provided to a trusted third party (SLA broker) which may provide SLA services on the network to select sets of domains to implement inter-domain services, and may also proxy to set up the service for the SLA requesting party.

Abstract: A networking system comprising a virtual group controller in an information centric network configured to enable mobility and security for a plurality of users groups of the information centric network, a plurality of user groups coupled to the virtual group controller and associated with the users, a plurality of agents that are each associated with one of the user groups, and a database for trusted service profile coupled to the virtual group controller, wherein the virtual group controller is configured to interact with the agents to enable mobility for the user groups using a server-less domain-based naming scheme.

Abstract: A content router for managing content for virtual private groups in a content oriented network, the content router comprising storage configured to cache a content from a customer in a content oriented network (CON), and a transmitter coupled to the storage and configured to forward the content upon request, wherein the content is signed by the user, wherein the CON provides different security levels for different users in a plurality of users, and wherein the plurality of users correspond to a plurality of user classes.

Abstract: A network element (NE) comprising a memory configured to store a digest log for a conference, a receiver configured to receive a first message from a first of a plurality of participants associated with the NE, wherein the first message comprises a signature profile of the first participant, a processor coupled to the receiver and the memory and configured to track a state of the conference by performing a first update of the digest log according to the first message, and a transmitter coupled to the processor and configured to send a second message to a first of a plurality of service proxies that serve the conference, wherein the second messages indicate the updated digest log.

Abstract: A network element (NE) comprising a memory configured to store a digest log for a conference, a receiver coupled to the memory and configured to receive a first message from a first of a plurality of service proxies of the conference, wherein the first message comprises a signature profile of a first of a plurality of participants of the conference associated with the first service proxy, a processor coupled to the receiver and the memory and configured to track a state of the conference by updating the digest log according to the first message, and a transmitter coupled to the processor and configured to send a plurality of second messages to indicate the digest log update to the service proxies without a transmission request from the service proxies.