Information firewall

The method 1, wherein the requesting entity includes one or more of:

• a computing node of a computer cluster;
• a computing device of an Enterprise environment;
• and
• a software application executed by a computing device.

A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method, the method comprising:

• obtaining an interest, from a requesting entity, wherein the interest includes a location-independent structured name associated with a request for data;
• obtaining the data associated with the location-independent structured name;
• obtaining a policy associated with the data;
• determining a context for the interest;
• and
• responsive to determining that the requesting entity is within a protected space, as determined based on the policy and the context, forwarding the data to the requesting entity.

The storage medium 9, wherein the requesting entity includes one or more of:

• a computing node of a computer cluster;
• a computing device of an Enterprise environment;
• and
• a software application executed by a computing device.

An apparatus, comprising:

• an interest-processing module configured to obtain an interest from a requesting entity, wherein the interest includes a location-independent structured name associated with a request for data;
• a data-obtaining module to obtain the data associated with the location-independent structured name;
• a policy-managing module to obtain a policy associated with the data;
• a context-determining module to determine a context for the interest;
• and
• a data-providing module to:
• determine whether the requesting entity is within a protected space, as determined based on the policy and the context;
• responsive to determining that the requesting entity is within the protected space, provide the data to the requesting entity.

The apparatus 17, wherein the requesting entity includes one or more of:

• a computing node of a computer cluster;
• a computing device of an Enterprise environment;
• and
• a software application executed by a computing device.