Abstract: An electronic device of a content producer generates a chunk of data, associates a location-independent name with the chunk of data, generates a signature for the chunk of data, attaches the signature to the chunk of data, and transmits the chunk of data, with the signature attached, to one or more user devices in response to respective requests. The signature is generated based on the data in the chunk, using a private key of the electronic device. The electronic device also stores information, including a specification of a public key associated with the private key, in a first ledger entry of a blockchain, to provide the one or more user devices with access to the public key. A user device may obtain the public key and use it to verify the chunk of data.

Abstract: The present disclosure provides a method of embedding finer grained information such as user identity and application identity in IPv6 addresses used for end-to-end communications within a network. The finer grained information can be used for improved policy enforcement within the network. In one aspect, generating an address for an end-to-end communication within a network, the address including a user identifier and an application identifier for network policy enforcement; assigning the address to an application used in the end-to-end communication; and performing network segmentation and the network policy enforcement within the network using the address.

Abstract: A network device in a network edge receives content directed to a mobile device attached to the network edge from an upstream network device and forwards the content toward the mobile device. The network device makes a decision whether to cache the content based at least in part on a popularity of the content in a region covered by the network device and a prediction error for an estimated probability that the mobile device will transition from the region to another region. The popularity is directly correlated with a first bias toward caching the content. The prediction error is inversely correlated with a second bias toward caching the content. The decision is implemented: the network device either caches the content or foregoes caching the content, in accordance with the decision.

Abstract: A consumer sends to a producer Interests to request data packets of a data stream that are generated at a production rate. Each data packet includes a name of the data stream, a segment of data, and a current segment number that identifies the data packet in the data stream and that increments as the data packets are generated. The Interests include the name and segment numbers of segments requested by the Interests. The consumer synchronizes the segment numbers with the current segment numbers and a rate for sending the Interests to the production rate. The consumer sends to the producer the Interests at the rate and with the segment numbers as synchronized, in order to minimize a delay time between when the data packets are generated and when the data packets are received at the consumer. The consumer receives from the producer data packets satisfying the Interests.

Abstract: A producer communicates over a network with a user application in an infrastructure-as-a-service (IaaS) and an IaaS node. The producer encrypts content with first encryption using a first key and second encryption using a second key, to produce twice encrypted content. The producer encrypts the second key with attribute-based encryption and symmetric encryption using an IaaS key, to produce a twice encrypted second key. The producer provides to the user application the twice encrypted content, the twice encrypted second key, and key information configured to remove the first encryption from the twice encrypted content. The producer provides to the IaaS node the IaaS key to enable the IaaS node to remove the symmetric encryption from the twice encrypted second key, such that the user application and the IaaS node are constrained to exchange with each other key-related information and intermediate decryption results in order to recover the content.

Abstract: Presented herein are methods for dynamic management of names and of named-based requests for media flows in an Information-Centric Network (ICN)-based real-time communication system. The use of different naming schemes on contribution segments and on distribution segments in such architectures results in an effective low latency and scalable communication model based on the notion of active speakers regardless of the underlying mapping between active speakers and participants controlled by the media bridge. Operations are performed both at client side and at media bridge side to dynamically manage binding of names to speakers, while minimizing overhead and complexity of operations involved by a change of active speaker/quality/layout.

Abstract: A networked electronic device produces a data object comprising content and assigns a location-independent application-level name to the data object. The location-independent application-level name is independent of any network location at which the content is available. The networked electronic device maps the location-independent application-level name to an IP address, generates a DNS resource record specifying the mapping of the location-independent application-level name to the IP address, and provides the DNS resource record to a DNS network node.

Abstract: Techniques for providing Hybrid information-centric networking (hICN) via a proxy application is described. A hICN proxy application provides hICN to legacy applications by diverting network traffic of a plurality of network traffic types to the hICN proxy application and storing network traffic information for the network traffic in a connection table. The hICN proxy application also translates the diverted network traffic to a hICN network traffic protocol and selects a forwarding strategy for the translated network traffic in order to send the hICN traffic over various non-hICN network protocol types. The hICN proxy application also transmits the translated traffic to a server proxy application using the selected forwarding strategy.

Abstract: A network of routers configure resource nodes connected to the network in accordance with a configuration model including configuration objects that imply resources. A router device among the network of router devices receives, from forwarding paths in the network relative to the router device, originated at the resource nodes and that indicate resources supported by the resource nodes. The router device creates mappings of the resources as advertised to the forwarding paths. The router device receives from the network an Intent request to create a configuration object among the configuration objects, and determines whether the configuration object matches a resource in the mappings. If the configuration object matches a resource in the mappings, the router device generates a new Intent request that identifies the resource, specifically, and forwards the new Intent request along the forwarding path mapped to the resource.

Abstract: In one embodiment, a device in a network receives an interest request for one or more pieces of content data available in the network. The interest request specifies the one or more pieces of content data via one or more bits sets in a content request bitmap of the interest request, each bit of the content request bitmap being associated with a different piece of content data. The device compares the content request bitmap to a content availability bitmap in a forwarding information base (FIB) of the device that is associated with a particular interface of the device and each bit of the content availability bitmap indicates whether a particular piece of content data is available via the particular interface. The device forwards the interest request via the particular interface, based on the comparison between the content request bitmap and the content availability bitmap in the FIB of the device.

Abstract: Embodiments include technologies for creating a manifest for a conferencing event in a network, adding a name tag identifying the conferencing event to the manifest, receiving an interest packet including one or more parameters indicating a named flow being produced at a source node, adding content metadata of the named flow to the manifest, and sending the manifest to the source node. Further embodiments include adding, to the manifest, session-level metadata associated with a user of the source node. Embodiments include receiving a second interest packet with one or more second parameters identifying a user of a client node, where the second interest packet indicates a request to authorize the user of the client node to subscribe to the conferencing event. In further embodiments, session-level metadata associated with the user is added to the manifest if the user is authorized to subscribe to the conferencing event.

Abstract: This disclosure describes techniques for employing a reusable acknowledgment in communications among network devices. The techniques include generating a reusable negative acknowledgment (NACK) in response to a request for data that are unavailable. The reusable NACK may be sent as a response for at least some additional requests for unavailable data, rather than generating a new NACK for each request. As such, the reusable NACK may help decrease the computational load for a network device. In some cases, the use of a reusable NACK may help lessen the impacts of denial-of-service type attacks across a network.

Abstract: Presented herein are methods for dynamic management of names and of named-based requests for media flows in an Information-Centric Network (ICN)-based real-time communication system. The use of different naming schemes on contribution segments and on distribution segments in such architectures results in an effective low latency and scalable communication model based on the notion of active speakers regardless of the underlying mapping between active speakers and participants controlled by the media bridge. Operations are performed both at client side and at media bridge side to dynamically manage binding of names to speakers, while minimizing overhead and complexity of operations involved by a change of active speaker/quality/layout.

Abstract: Embodiments include technologies for creating a manifest for a conferencing event in a network, adding a name tag identifying the conferencing event to the manifest, receiving an interest packet including one or more parameters indicating a named flow being produced at a source node, adding content metadata of the named flow to the manifest, and sending the manifest to the source node. Further embodiments include adding, to the manifest, session-level metadata associated with a user of the source node. Embodiments include receiving a second interest packet with one or more second parameters identifying a user of a client node, where the second interest packet indicates a request to authorize the user of the client node to subscribe to the conferencing event. In further embodiments, session-level metadata associated with the user is added to the manifest if the user is authorized to subscribe to the conferencing event.

Abstract: A method is provided in one example embodiment and may include receiving an interest message at a gateway, wherein the gateway provides connectivity to a plurality of radio accesses that interface with an Information-Centric Networking-based (ICN-based) network; identifying a service class associated with the interest message; selecting a particular radio access of the plurality of radio accesses to handle traffic for the interest message based on at least one of: one or more policies associated with the service class, one or more policies associated with the plurality of radio accesses, and network conditions associated with the plurality of radio accesses; and forwarding the interest message to the particular radio access.

Abstract: The present disclosure provides a method of embedding finer grained information such as user identity and application identity in IPv6 addresses used for end-to-end communications within a network. The finer grained information can be used for improved policy enforcement within the network. In one aspect, generating an address for an end-to-end communication within a network, the address including a user identifier and an application identifier for network policy enforcement; assigning the address to an application used in the end-to-end communication; and performing network segmentation and the network policy enforcement within the network using the address.

Abstract: Content can be delivered by a producer service to one or more consumer services over an information centric network (“ICN”) by storing application frames in a forwarding cache of an ICN node. The consumer services may retrieve applications frames from the ICN node rather than from the producer service directly.

Abstract: A method is provided in one example embodiment and may include determining each station of a plurality of stations connected to a WiFi access point that are to receive downlink video transmissions from the WiFi access point, wherein the WiFi access point is connected to an Information-Centric Networking-based (ICN-based) network; associating each station of the plurality of stations to each of a corresponding ICN face of a plurality of ICN faces maintained by the WiFi access point; and managing a downlink transmission buffer for each station of the plurality of stations based, at least in part, a modulation and coding scheme (MCS) associated with downlink video transmissions for each station of the plurality of stations, wherein each downlink transmission buffer is associated with the corresponding ICN face associated with each station.

Abstract: A method is provided in one example embodiment and may include receiving an interest message at a gateway, wherein the gateway provides connectivity to a plurality of radio accesses that interface with an Information-Centric Networking-based (ICN-based) network; identifying a service class associated with the interest message; selecting a particular radio access of the plurality of radio accesses to handle traffic for the interest message based on at least one of: one or more policies associated with the service class, one or more policies associated with the plurality of radio accesses, and network conditions associated with the plurality of radio accesses; and forwarding the interest message to the particular radio access.

Abstract: A method is provided in one example embodiment and may include generating an interest message to be transmitted using each face of a plurality of faces associated with a node, wherein the interest message is to be discarded by each of a neighboring node of a plurality of neighboring nodes that receive the interest message; determining, for each face of the plurality of faces associated with the node, a one-hop propagation delay associated with each face of the plurality of faces; and selecting a particular face through which to transmit another interest message based, at least in part, on the one-hop propagation delay of the particular face and a number of pending interests associated with the particular face.