Abstract: This disclosure describes techniques for controlling group access to a collaboration technology. The techniques include generating a shared encryption key among authorized producers of content associated with a collaboration technology. The techniques include receiving, by the authorized producers and from authenticated consumers, requests to access the content. The requests may be received in a partitioned manner, such that individual producers are serving a particular subset of the authenticated consumers. In response to receiving the requests, the techniques include sending the shared encryption key from the individual producers to the corresponding subset of authenticated consumers. The techniques include using the shared encryption key to encrypt content by the authorized producers, which may then be decrypted by the authenticated consumers using the shared encryption key, achieving end-to-end encryption of event content.

Abstract: An electronic device of a content producer generates a chunk of data, associates a location-independent name with the chunk of data, generates a signature for the chunk of data, attaches the signature to the chunk of data, and transmits the chunk of data, with the signature attached, to one or more user devices in response to respective requests. The signature is generated based on the data in the chunk, using a private key of the electronic device. The electronic device also stores information, including a specification of a public key associated with the private key, in a first ledger entry of a blockchain, to provide the one or more user devices with access to the public key. A user device may obtain the public key and use it to verify the chunk of data.

Abstract: In one embodiment, a delivery service provided by a device receives one or more Messaging Layer Security commit messages comprising a plurality of public and private keys for a Messaging Layer Security group. The delivery service identifies subsets of the plurality of public and private keys to be sent to different destination subgroups in the Messaging Layer Security group. The delivery service maps each of the subsets to Hybrid Information-Centric Networking names. The delivery service sends, based on the Hybrid Information-Centric Networking names, the subsets of the plurality of public and private keys to destination subgroups in the Messaging Layer Security group.

Abstract: In one embodiment, an agent executed on a device receives performance metrics regarding a transport layer of the device. The agent sends the performance metrics to an application executed on the device. The application makes, based on the performance metrics, a determination indicating one or more adjustments to a packet flow of a plurality of packet flows sent by the application. The application, based on the determination, sends an adjusted packet flow according to the one or more adjustments as part of the plurality of packet flows.

Abstract: In one embodiment, a delivery service provided by a device receives one or more Messaging Layer Security commit messages comprising a plurality of public and private keys for a Messaging Layer Security group. The delivery service identifies subsets of the plurality of public and private keys to be sent to different destination subgroups in the Messaging Layer Security group. The delivery service maps each of the subsets to Hybrid Information-Centric Networking names. The delivery service sends, based on the Hybrid Information-Centric Networking names, the subsets of the plurality of public and private keys to destination subgroups in the Messaging Layer Security group.

Abstract: In one embodiment, a device that executes an application obtains a delay budget objective for traffic for the application to be sent by a Hybrid Information-Centric Networking source to the device. The device makes a determination as to whether the traffic for the application to be sent by the Hybrid Information-Centric Networking source to the device should use a forward error correction mechanism or a retransmission mechanism, in an attempt to optimize the delay budget objective. The device sends, to the Hybrid Information-Centric Networking source, a Hybrid Information-Centric Networking request for the traffic for the application, wherein the Hybrid Information-Centric Networking request is indicative of the determination. The device receives, from the Hybrid Information-Centric Networking source, one or more packets of the traffic for the application, after sending the Hybrid Information-Centric Networking request.

Abstract: In one embodiment, a device determines a first difference between current path measurements and prior path measurements. The device determines a second difference between current predictions and prior predictions made by a prediction model based on path measurements. The device computes, based on the first difference and the second difference, an interest metric for the current path measurements. The device sends at least a portion of the current path measurements for input to the prediction model, when the interest metric exceeds a predefined threshold.

Abstract: This disclosure describes techniques for implementing centralized path computation for routing in hybrid information-centric networking protocols implemented as a virtual network overlay. A method includes receiving an interest packet header from a forwarding router node of a network overlay. The method further includes determining an interest path of the interest packet and one or more destination router nodes of the network overlay. The method further includes computing one or more paths over the network overlay. The method further includes determining an addressing method for the one or more computed paths over the network overlay. The method further includes performing at least one of encoding each computed path in a data packet header, and encoding each computed path as state entries of each router node of the network overlay on each respective path. The method further includes returning the computed path information to the forwarding router node.

Abstract: This disclosure describes techniques for controlling group access to a collaboration technology. The techniques include generating a shared encryption key among authorized producers of content associated with a collaboration technology. The techniques include receiving, by the authorized producers and from authenticated consumers, requests to access the content. The requests may be received in a partitioned manner, such that individual producers are serving a particular subset of the authenticated consumers. In response to receiving the requests, the techniques include sending the shared encryption key from the individual producers to the corresponding subset of authenticated consumers. The techniques include using the shared encryption key to encrypt content by the authorized producers, which may then be decrypted by the authenticated consumers using the shared encryption key, achieving end-to-end encryption of event content.

Abstract: This disclosure describes techniques for implementing centralized path computation for routing in hybrid information-centric networking protocols implemented as a virtual network overlay. A method includes receiving an interest packet header from a forwarding router node of a network overlay. The method further includes determining an interest path of the interest packet and one or more destination router nodes of the network overlay. The method further includes computing one or more paths over the network overlay. The method further includes determining an addressing method for the one or more computed paths over the network overlay. The method further includes performing at least one of encoding each computed path in a data packet header, and encoding each computed path as state entries of each router node of the network overlay on each respective path. The method further includes returning the computed path information to the forwarding router node.

Abstract: Techniques for providing Hybrid information-centric networking (hICN) via a proxy application is described. A hICN proxy application provides hICN to legacy applications by diverting network traffic of a plurality of network traffic types to the hICN proxy application and storing network traffic information for the network traffic in a connection table. The hICN proxy application also translates the diverted network traffic to a hICN network traffic protocol and selects a forwarding strategy for the translated network traffic in order to send the hICN traffic over various non-hICN network protocol types. The hICN proxy application also transmits the translated traffic to a server proxy application using the selected forwarding strategy.

Abstract: A network device is configured to distribute audio streams and video streams among participant devices connected to the network device over a communication network. The network device collects respective audio streams from the participant devices, and ranks the participant devices based on the respective audio streams collected from the participant devices. Based on the ranking, the network device elects top-N participant devices among the participant devices as being associated with respective users who are active speakers, where N is one or more, and retrieves respective video streams only from the top-N participant devices. The network device receives from the participant devices respective requests for video streams from the top-N participant devices, and sends to the participant devices the video streams retrieved only from the top-N participant devices.

Abstract: In various implementations, a network device receives a packet from a content producer. The packet includes data and further includes a signature generated by the content producer, based on the data, using a private key of the content producer. The network device modifies the packet without affecting the signature and forwards the modified packet toward a user device. The network device also sends the user device a manifest specifying how the packet was modified. The user device receives the packet and manifest, restores the packet's original data based on the manifest, and verifies the original data using the signature and a public key corresponding to the private key of the content producer. In response to verification of the original data, an application on the user device is allowed to use the data.

Abstract: Content can be delivered by a producer service to one or more consumer services over an information centric network (“ICN”) by storing application frames in a forwarding cache of an ICN node. The consumer services may retrieve applications frames from the ICN node rather than from the producer service directly.

Abstract: An electronic device of a content producer generates a chunk of data, associates a location-independent name with the chunk of data, generates a signature for the chunk of data, attaches the signature to the chunk of data, and transmits the chunk of data, with the signature attached, to one or more user devices in response to respective requests. The signature is generated based on the data in the chunk, using a private key of the electronic device. The electronic device also stores information, including a specification of a public key associated with the private key, in a first ledger entry of a blockchain, to provide the one or more user devices with access to the public key. A user device may obtain the public key and use it to verify the chunk of data.

Abstract: Presented herein is a solution in which a Producer that provides Transport Layer Security (TLS) over a hybrid Information Centric Network (hICN) announces two different hICN prefixes or namespaces. One hICN prefix is for performing a TLS handshake (also called a handshake prefix or handshake namespace) and another hICN prefix (also called a secure prefix or secure namespace) is to publish content in a secure, and confidential manner with a Consumer that correctly performs a TLS handshake. While the handshake prefix is public and shared by multiple Consumers, a secure prefix is uniquely assigned to a Consumer after the TLS handshake successfully terminates. Content published under the secure prefix is encrypted with the encryption key established during the TLS handshake. Names used in the secure namespace are private, meaning only the Consumer and Producer that perform the handshake can infer any information about a content by looking on the name.

Abstract: An electronic device of a content producer generates a chunk of data, associates a location-independent name with the chunk of data, generates a signature for the chunk of data, attaches the signature to the chunk of data, and transmits the chunk of data, with the signature attached, to one or more user devices in response to respective requests. The signature is generated based on the data in the chunk, using a private key of the electronic device. The electronic device also stores information, including a specification of a public key associated with the private key, in a first ledger entry of a blockchain, to provide the one or more user devices with access to the public key. A user device may obtain the public key and use it to verify the chunk of data.

Abstract: A consumer sends to a producer Interests to request data packets of a data stream that are generated at a production rate. Each data packet includes a name of the data stream, a segment of data, and a current segment number that identifies the data packet in the data stream and that increments as the data packets are generated. The Interests include the name and segment numbers of segments requested by the Interests. The consumer synchronizes the segment numbers with the current segment numbers and a rate for sending the Interests to the production rate. The consumer sends to the producer the Interests at the rate and with the segment numbers as synchronized, in order to minimize a delay time between when the data packets are generated and when the data packets are received at the consumer. The consumer receives from the producer data packets satisfying the Interests.

Abstract: A network device in a network edge receives content directed to a mobile device attached to the network edge from an upstream network device and forwards the content toward the mobile device. The network device makes a decision whether to cache the content based at least in part on a popularity of the content in a region covered by the network device and a prediction error for an estimated probability that the mobile device will transition from the region to another region. The popularity is directly correlated with a first bias toward caching the content. The prediction error is inversely correlated with a second bias toward caching the content. The decision is implemented: the network device either caches the content or foregoes caching the content, in accordance with the decision.

Abstract: A producer communicates over a network with a user application in an infrastructure-as-a-service (IaaS) and an IaaS node. The producer encrypts content with first encryption using a first key and second encryption using a second key, to produce twice encrypted content. The producer encrypts the second key with attribute-based encryption and symmetric encryption using an IaaS key, to produce a twice encrypted second key. The producer provides to the user application the twice encrypted content, the twice encrypted second key, and key information configured to remove the first encryption from the twice encrypted content. The producer provides to the IaaS node the IaaS key to enable the IaaS node to remove the symmetric encryption from the twice encrypted second key, such that the user application and the IaaS node are constrained to exchange with each other key-related information and intermediate decryption results in order to recover the content.