First Steps in Exploring Pervasive Persistent Identification for Information Centric Networking

信息中心网络（ICN）是一种新的网络体系结构范式，在这种范式中，信息而不是数据包（传输单元）被赋予了首要地位。这个概念是NSF最近的几个未来互联网架构项目以及其他美国和国际项目的核心。这种模式具有变革性，因为目标不是将比特从一个地方移动到另一个地方，而是提供对信息的访问，而不考虑位置。因此，以信息或内容为中心的网络设计的核心是标识符。本研究的重点是标识符和为其服务的系统。在这个EAGER提案中，PI计划对支持标识符持久性和普遍性的标识管理设计进行验证和评估的一系列初步步骤。我们的计划是，这种能力可以驻留在任何一种ICN方法之上。因此，这种识别方法可以提供有效的持久性和普遍性，并且可以转换为当前的ICN标识符，这些标识符通常用于以与位置无关的方式传递比特。该项目旨在验证和评估在两个相互之间存在显著差异的当前ICN项目之上提供间接层的有效性。有效性的论证将特别关注持久性和机会拒绝服务攻击的最小化，这两个功能在ICNs本身不支持。标识符和标识管理的持久性需求对于支持信息本身的寿命至关重要。选择减少拒绝服务攻击作为第二个挑战有两个原因。首先，拒绝服务攻击只可能在普及系统中发生，在这种系统中，攻击可以在整个系统中广泛协调。其次，ICN项目的关键问题之一是基础设施的安全性和完整性。所有这些系统都支持端到端完整性、隐私性和机密性，但没有一个系统关注提供端到端服务的基础设施的安全性。因此，选择减少拒绝服务攻击作为该项目的第二个挑战。这个项目是一个必要的概念验证，为更大的努力探索整个普及持久识别系统（PPInS）奠定了基础。设计的核心是一组idspace，它们在几个方面是不同的：它们支持的id语法、id的管理（例如它们的分配和解析）以及它们提供的安全性。每个都将一个全局唯一的、持久的标识符转换为底层ICN的标识符。一个全局解析方案将把每个标识映射到适当的标识空间管理设施。在这项初步工作中，研究人员将设计其中一个id空间，并在两个相互竞争的ICN方法之上对其进行有效性和评估。更大项目的贡献可以通过智力价值和更广泛的影响来列举。智力优势：如果成功，将识别与支持的ICN层彻底分离的提议将产生三个具体贡献：通过隔离和分层实现识别的持久性和普遍性；识别方法的可扩展性和可演化性，通过识别层内的模块化来满足不同的性能、安全性和可伸缩性需求；随着时间的推移，端到端原则的扩展，通过认识到识别与位置独立表达的活动的分离，包括差异化的端到端和基础设施安全。更广泛的影响：这项工作有三个核心的更广泛的影响：持久信息的作用和支持(独立于以信息为中心的网络，因为互联网继续扩大其对当代社会的经济、公民和军事/情报组成部分的作用和影响？信息的价值不仅在于它的短期效果，而且在于它在极长时间内的持续存在。女性的教育和培训（PI是一名女性，通过她的研究一直支持并将继续支持科学领域的年轻女性）和国际合作（这项工作是麻省理工学院与剑桥大学之间富有成效的研究合作的一部分，特别是在追求ICN项目的领导下。）

Information Centric Networking (ICN) is a new networking architectural paradigm in which information rather than packets (units of transmission) are given primacy. This concept is central to several of the NSF's recent Future Internet Architecture projects as well as other US based and international projects. The paradigm is transformational because the objective is not to move bits from one place to another but rather to provide access to information, without regard to location. Hence at the core of an information or content centric networking design is identifiers. This research focuses on identifiers and the system that services them. In this EAGER proposal, the PI plans on a set of first steps in validation and evaluation of a design for identity management that supports both persistence and pervasiveness of identifiers. The plan is that this capability can reside on top of any one of the approaches to ICN. Thus, this identification approach can provide effective persistence and pervasiveness and can be translated into current ICN identifiers, which generally are intended for delivery of bits in a location-independent way.The project is to validate and evaluate the effectiveness of providing an indirection layer on top of two of the current ICN projects that are significantly different from each other. The demonstration of validity will focus specifically on persistence and minimization of opportunities denial of service attacks, two capabilities not supported in the ICNs themselves. The requirement for persistence of identifiers and identification management is critical to supporting longevity of the information itself. Mitigation of denial-of-service attacks is selected as the second challenge for two reasons. First, denial-of-service attacks are only possible in pervasive systems, in which attacks can be coordinated widely across a system. Second, one of the key questions across the set of ICN projects is the security and integrity of the infrastructure. All these systems support end-to-end integrity, privacy, confidentiality, but none focuses on the security of the infrastructure that is providing that end-to-end service. Hence denial of service attack mitigation has been selected as the second challenge for this project.This project is a necessary proof of concept setting the stage for a larger effort to explore a whole Pervasive Persistent Identification System (PPInS). At the core of the design is a set of idspaces that are distinct in several ways: the id syntax they support, the management of ids (such as assignment and resolution of them) and the security they provide. Each will translate a globally unique, persistent identifier into the identifiers of the underlying ICN. A global resolution scheme will map each id to the appropriate idspace management facility. In this preliminary work, the researchers will design one of those idspaces and evaluate it on top of two of the competing ICN approaches, for validity and evaluation. The contributions of the larger project can be enumerated by intellectual merit and broader impact.Intellectual Merit: The proposed clean separation of identification from the supporting ICN layers, if successful, will result in three specific contributions: the persistence and ubiquity of identification, achieved through isolation and layering; the extensibility and evolvability of approaches to identification to meet varying performance, security, and scalability requirements through modularity within the identification layer; and the extension of the end-to-end principle over time by recognizing the separation of identification from the activities of location independent expressions of interesting and delivery including differentiated end-to-end and infrastructure security.Broader Impact: There are three central broader impacts of this work: the role and support of persistent information (Independent of information centric networking, as the Internet continues to expand in its role and influence on economic, civic, and military/intelligence components of contemporary society?the value of information is not only in its short term effect, but in the persistence over extremely long periods of time); the education and training of women (The PI is a woman and has consistently supported and will continue to support young women in science, through her research. ) and international collaboration (This work is part of a productive research collaboration between MIT and the University of Cambridge, specifically the leadership of the PURSUIT ICN project.)