First Steps in Exploring Pervasive Persistent Identification for Information Centric Networking

信息中心网络（ICN）是一种新的网络架构范例，其中信息而不是分组（传输单元）被赋予首要地位。 这个概念是NSF最近的几个未来互联网架构项目以及其他美国和国际项目的核心。 这种模式是变革性的，因为其目标不是将比特从一个地方转移到另一个地方，而是提供对信息的访问，而不考虑位置。 因此，以信息或内容为中心的网络设计的核心是标识符。 这项研究的重点是标识符和服务它们的系统。 在这个EAGER提案中，PI计划在验证和评估支持标识符持久性和普遍性的身份管理设计方面采取一系列初步步骤。 该计划是，这种能力可以驻留在任何一种ICN方法之上。 因此，这种识别方法可以提供有效的持久性和普遍性，并可以转换为当前的ICN标识符，通常用于以位置无关的方式传递比特。该项目是验证和评估在当前两个ICN项目上提供间接层的有效性，这两个项目彼此显著不同。有效性的证明将特别关注拒绝服务攻击的持续性和机会最小化，这两种能力在ICN本身中不受支持。标识符和标识管理的持久性要求对于支持信息本身的寿命至关重要。出于两个原因，拒绝服务攻击的缓解被选为第二个挑战。首先，拒绝服务攻击只可能在普适系统中发生，在这种系统中，攻击可以在整个系统中广泛协调。其次，ICN项目的关键问题之一是基础设施的安全性和完整性。所有这些系统都支持端到端的完整性、隐私性和机密性，但没有一个系统关注提供端到端服务的基础设施的安全性。因此，拒绝服务攻击缓解已被选为本项目的第二个挑战。本项目是一个必要的概念验证，为探索整个普适持久识别系统（PPInS）的更大努力奠定了基础。设计的核心是一组在几个方面不同的id空间：它们支持的id语法，id的管理（例如它们的分配和解析）以及它们提供的安全性。 每一个都将把一个全球唯一的、持久的标识符转换为底层ICN的标识符。 全局解析方案将把每个id映射到适当的idspace管理工具。 在这项初步工作中，研究人员将设计其中一个idspace，并在两种竞争性ICN方法的基础上对其进行评估，以获得有效性和评估。 这个较大的项目的贡献可以通过知识价值和更广泛的影响来列举。知识价值：如果成功的话，拟议的身份识别与支持ICN层的明确分离将产生三个具体的贡献：通过隔离和分层实现身份识别的持久性和普遍性;识别方法的可扩展性和可演进性，以通过识别层内的模块化来满足不同的性能、安全性和可扩展性要求;以及随着时间的推移，通过认识到身份识别与位置无关的兴趣表达和交付活动（包括差异化的端到端和基础设施安全性）的分离，扩展端到端原则。更广泛的影响：这项工作有三个主要的更广泛的影响：持续信息的作用和支持（独立于信息中心网络，因为互联网在当代社会的经济、公民和军事/情报组成部分中的作用和影响不断扩大？信息的价值不仅在于它的短期效果，而且在于它在极长时期内的持久性）;妇女的教育和培训（PI是一名女性，通过她的研究一直支持并将继续支持年轻女性从事科学工作。）和国际合作（这项工作是麻省理工学院和剑桥大学之间富有成效的研究合作的一部分，特别是PURSUIT ICN项目的领导。

Information Centric Networking (ICN) is a new networking architectural paradigm in which information rather than packets (units of transmission) are given primacy. This concept is central to several of the NSF's recent Future Internet Architecture projects as well as other US based and international projects. The paradigm is transformational because the objective is not to move bits from one place to another but rather to provide access to information, without regard to location. Hence at the core of an information or content centric networking design is identifiers. This research focuses on identifiers and the system that services them. In this EAGER proposal, the PI plans on a set of first steps in validation and evaluation of a design for identity management that supports both persistence and pervasiveness of identifiers. The plan is that this capability can reside on top of any one of the approaches to ICN. Thus, this identification approach can provide effective persistence and pervasiveness and can be translated into current ICN identifiers, which generally are intended for delivery of bits in a location-independent way.The project is to validate and evaluate the effectiveness of providing an indirection layer on top of two of the current ICN projects that are significantly different from each other. The demonstration of validity will focus specifically on persistence and minimization of opportunities denial of service attacks, two capabilities not supported in the ICNs themselves. The requirement for persistence of identifiers and identification management is critical to supporting longevity of the information itself. Mitigation of denial-of-service attacks is selected as the second challenge for two reasons. First, denial-of-service attacks are only possible in pervasive systems, in which attacks can be coordinated widely across a system. Second, one of the key questions across the set of ICN projects is the security and integrity of the infrastructure. All these systems support end-to-end integrity, privacy, confidentiality, but none focuses on the security of the infrastructure that is providing that end-to-end service. Hence denial of service attack mitigation has been selected as the second challenge for this project.This project is a necessary proof of concept setting the stage for a larger effort to explore a whole Pervasive Persistent Identification System (PPInS). At the core of the design is a set of idspaces that are distinct in several ways: the id syntax they support, the management of ids (such as assignment and resolution of them) and the security they provide. Each will translate a globally unique, persistent identifier into the identifiers of the underlying ICN. A global resolution scheme will map each id to the appropriate idspace management facility. In this preliminary work, the researchers will design one of those idspaces and evaluate it on top of two of the competing ICN approaches, for validity and evaluation. The contributions of the larger project can be enumerated by intellectual merit and broader impact.Intellectual Merit: The proposed clean separation of identification from the supporting ICN layers, if successful, will result in three specific contributions: the persistence and ubiquity of identification, achieved through isolation and layering; the extensibility and evolvability of approaches to identification to meet varying performance, security, and scalability requirements through modularity within the identification layer; and the extension of the end-to-end principle over time by recognizing the separation of identification from the activities of location independent expressions of interesting and delivery including differentiated end-to-end and infrastructure security.Broader Impact: There are three central broader impacts of this work: the role and support of persistent information (Independent of information centric networking, as the Internet continues to expand in its role and influence on economic, civic, and military/intelligence components of contemporary society?the value of information is not only in its short term effect, but in the persistence over extremely long periods of time); the education and training of women (The PI is a woman and has consistently supported and will continue to support young women in science, through her research. ) and international collaboration (This work is part of a productive research collaboration between MIT and the University of Cambridge, specifically the leadership of the PURSUIT ICN project.)