# US 2019/0319964 A1 · Information-centric network namespace policy-based content delivery

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0319964 A1
- Document ID: US20190319964A1
- Status: Published application
- Kind: A1
- Application number: 16/455,211
- Filed: 2019-06-27
- Published: 2019-10-17
- Earliest claimed: 2019-06-27
- Assignees: Intel Corporation
- Inventors: Ned M. Smith; Srikathyayani Srikanteswara; Ravikumar Balakrishnan; Rajesh Poornachandran; Moreno Ambrosin
- Web page: https://patentgrep.com/patent/US20190319964A1

## CPC

- H04L 63/105: {Multiple levels of security}
- H04L 67/06: specially adapted for file transfer, e.g. file transfer protocol [FTP]
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3247: {involving digital signatures}
- H04L 9/3255: {using group based signatures, e.g. ring or threshold signatures}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L 63/065: {for group communications (cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833)}
- H04L 69/22: Parsing or analysis of headers
- H04W 60/00: Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
- H04L 2463/062: applying encryption of the keys
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Systems and techniques for information-centric network namespace policy-based content delivery are described herein. A registration request may be received from a node on an information-centric network (ICN). Credentials of the node may be validated. The node may be registered with the ICN based on results of the validation. A set of content items associated with the node may be registered with the ICN. An interest packet may be received from a consumer node for a content item of the set of content items that includes an interest packet security level for the content item. Compliance of the security level of the node with the interest packet security level may be determined. The content item may be transmitted to the consumer node.

## Claims

### Claim 1

A system for information-centric network namespace policy-based content delivery, the system comprising:
at least one processor; and
memory including instructions that, when executed by the at least one processor, cause the at least one processor to perform operations to:
receive a registration request from a node on an information-centric network (ICN);
validate credentials of the node, wherein validation of the credentials includes verification of a security level and a category included in the credentials;
register the node with the ICN based on results of the validation;
register a set of content items associated with the node with the ICN;
receive an interest packet from a consumer node for a content item of the set of content items that includes an interest packet security level for the content item;
determine compliance of the security level of the node with the interest packet security level; and
transmit, responsive to the compliance determination, the content item to the consumer node.

### Claim 2 (depends on 1)

The system of claim 1, further comprising instructions that cause the at least one processor to:
determine that the interest packet has been signed with a group key;
identify that the node is a member of a group associated with the group key;
validate a group signature included in the interest packet; and
transmit, upon validation of the group signature, the content item to the consumer node.

### Claim 3 (depends on 2)

The system of claim 2, further comprising instructions that cause the at least one processor to:
encapsulate the content item in a data packet;
sign the data packet with the group key; and
transmit the data packet to the consumer node, wherein a group signature included in the data packet is used by the consumer node to validate the authenticity of the data packet.

### Claim 4 (depends on 2)

The system of claim 2, further comprising: instructions that cause the at least one processor to:
determine that the node is not a member of the group associated with the group key; and
prevent transmission of the content item to the consumer node.

### Claim 5 (depends on 1)

The system of claim 1, further comprising instructions that cause the at least one processor to:
maintain a key status blockchain for nodes on the ICN;
validate a key status for a key associated with the consumer node; and
transmit the content to the consumer node based upon the validation of the key status.

### Claim 6 (depends on 5)

The system of claim 5, further comprising instructions that cause the at least one processor to:
receive a key status update from the consumer node for the key;
validate the key status update;
cache the key status update in a local key status cache of the node; and
synchronize the key status update to other nodes of the ICN.

### Claim 7 (depends on 6)

The system of claim 6, wherein the instructions to synchronize the key status update further comprises instructions that cause the at least one processor to:
transmit the key status update to miner nodes on the ICN;
transmit the key status update from the miner nodes to respective key status update subscribers of the miner nodes; and
transmit the key status update from router nodes to respective key status update subscribers of the router nodes.

### Claim 8 (depends on 1)

The system of claim 1, further comprising instructions that cause the at least one processor to:
identify a set of trusted execution environment-based attestation claims and a nonce in the interest packet; and
generate a data packet including a proof based on the set of trusted execution environment-based attestation claims, the nonce, and the content item, wherein transmission of the content item to the consumer node includes transmission of the data packet to the consumer node.

### Claim 9

At least one non-transitory machine readable medium including instructions for information-centric network namespace policy-based content delivery that, when executed by at least one processor, cause the at least one processor to perform operations to:
receive a registration request from a node on an information-centric network (ICN);
validate credentials of the node, wherein validation of the credentials includes verification of a security level and a category included in the credentials;
register the node with the ICN based on results of the validation;
register a set of content items associated with the node with the ICN;
receive an interest packet from a consumer node for a content item of the set of content items that includes an interest packet security level for the content item;
determine compliance of the security level of the node with the interest packet security level; and
transmit, responsive to the compliance determination, the content item to the consumer node.

### Claim 10 (depends on 9)

The at least one non-transitory machine readable medium of claim 9, further comprising instructions that cause the at least one processor to:
determine that the interest packet has been signed with a group key;
identify that the node is a member of a group associated with the group key;
validate a group signature included in the interest packet; and
transmit, upon validation of the group signature, the content item to the consumer node.

### Claim 11 (depends on 10)

The at least one non-transitory machine readable medium of claim 10, further comprising instructions that cause the at least one processor to:
encapsulate the content item in a data packet;
sign the data packet with the group key; and
transmit the data packet to the consumer node, wherein a group signature included in the data packet is used by the consumer node to validate the authenticity of the data packet.

### Claim 12 (depends on 10)

The at least one non-transitory machine readable medium of claim 10, further comprising: instructions that cause the at least one processor to:
determine that the node is not a member of the group associated with the group key; and
prevent transmission of the content item to the consumer node.

### Claim 13 (depends on 9)

The at least one non-transitory machine readable medium of claim 9, further comprising instructions that cause the at least one processor to:
maintain a key status blockchain for nodes on the ICN;
validate a key status for a key associated with the consumer node; and
transmit the content to the consumer node based upon the validation of the key status.

### Claim 14 (depends on 13)

The at least one non-transitory machine readable medium of claim 13, further comprising instructions that cause the at least one processor to:
receive a key status update from the consumer node for the key;
validate the key status update;
cache the key status update in a local key status cache of the node; and
synchronize the key status update to other nodes of the ICN.

### Claim 15 (depends on 14)

The at least one non-transitory machine readable medium of claim 14, wherein the instructions to synchronize the key status update further comprises instructions that cause the at least one processor to:
transmit the key status update to miner nodes on the ICN;
transmit the key status update from the miner nodes to respective key status update subscribers of the miner nodes; and
transmit the key status update from router nodes to respective key status update subscribers of the router nodes.

### Claim 16 (depends on 9)

The at least one non-transitory machine readable medium of claim 9, further comprising instructions that cause the at least one processor to:
identify a set of trusted execution environment-based attestation claims and a nonce in the interest packet; and
generate a data packet including a proof based on the set of trusted execution environment-based attestation claims, the nonce, and the content item, wherein transmission of the content item to the consumer node includes transmission of the data packet to the consumer node.

### Claim 17

A method for information-centric network namespace policy-based content delivery, the method comprising:
receiving a registration request from a node on an information-centric network (ICN);
validating credentials of the node, wherein validating the credentials includes verifying a security level and a category included in the credentials;
registering the node with the ICN based on results of the validation;
registering a set of content items associated with the node with the ICN;
receiving an interest packet from a consumer node for a content item of the set of content items that includes an interest packet security level for the content item;
determining compliance of the security level of the node with the interest packet security level; and
transmitting, responsive to the compliance determination, the content item to the consumer node.

### Claim 18 (depends on 17)

The method of claim 17, further comprising:
determining that the interest packet has been signed with a group key;
identifying that the node is a member of a group associated with the group key;
validating a group signature included in the interest packet; and
transmitting, upon validation of the group signature, the content item to the consumer node.

### Claim 19 (depends on 18)

The method of claim 18, further comprising:
encapsulating the content item in a data packet;
signing the data packet using the group key; and
transmitting the data packet to the consumer node, wherein a group signature included in the data packet is used by the consumer node to validate the authenticity of the data packet.

### Claim 20 (depends on 18)

The method of claim 18, further comprising:
determining that the node is not a member of the group associated with the group key; and
preventing transmission of the content item to the consumer node.

### Claim 21 (depends on 17)

The method of claim 17, further comprising:
maintaining a key status blockchain for nodes on the ICN;
validating a key status for a key associated with the consumer node; and
transmitting the content to the consumer node based upon the validation of the key status.

### Claim 22 (depends on 21)

The method of claim 21, further comprising:
receiving a key status update from the consumer node for the key;
validating the key status update;
caching the key status update in a local key status cache of the node; and
synchronizing the key status update to other nodes of the ICN.

### Claim 23 (depends on 22)

The method of claim 22, wherein synchronizing the key status update further comprises:
transmitting the key status update to miner nodes on the ICN;
transmitting the key status update from the miner nodes to respective key status update subscribers of the miner nodes; and
transmitting the key status update from router nodes to respective key status update subscribers of the router nodes.

### Claim 24 (depends on 17)

The method of claim 17, further comprising:
identifying a set of trusted execution environment-based attestation claims and a nonce in the interest packet; and
generating a data packet including a proof based on the set of trusted execution environment-based attestation claims, the nonce, and the content item, wherein transmitting the content item to the consumer node includes transmitting the data packet to the consumer node.