Method and apparatus for secure ad hoc group device-to-device communication in information-centric network

A method of establishing secure discovery and secure communication in an ad hoc information-centric network (ICN), comprising:

• an application in a consumer device sending a discovery interest including an associated service name or prefix signed by an encryption key using the ICN;
• a producer device publishing and discovery protocol (SPDP) on an ICN stack of a producer device receiving the discovery interest from the ICN and checking to see if there is a local published service that matches the service name or prefix in the discovery interest, and if so, verifying the consumer device using the encryption key;
• the producer device SPDP returning a data protocol data unit (PDU) to the consumer device configured to enable the consumer device to access the local published service;
• and
• the consumer device establishing routing with the producer device and receiving the local published service;
• wherein the data PDU includes a random name, a service profile, and a public key;
• wherein the random name is a pseudo-random name generated by the producer device, and the service profile is the matched local published service including a real service name.

A method of establishing secure discovery and secure communication in an ad hoc information-centric network (ICN), comprising:

• an application in a consumer device sending a discovery interest including an associated service name or prefix signed by an encryption key using the ICN;
• a producer device publishing and discovery protocol (SPDP) on an ICN stack of a producer device receiving the discovery interest from the ICN and checking to see if there is a local published service that matches the service name or prefix in the discovery interest, and if so, verifying the consumer device using the encryption key;
• the producer device SPDP returning a data protocol data unit (PDU) to the consumer device configured to enable the consumer device to access the local published service;
• and
• the consumer device establishing routing with the producer device and receiving the local published service;
• wherein the data PDU includes a random name, a service profile, and a group session key;
• wherein multiple said consumer devices send a discovery interest including an associated service name or prefix encrypted by an encryption key using the ICN, and receive and decrypt the data PDU with the group session key to obtain the same random name and service profile.

A producer device for establishing secure discovery and secure communication in an ad hoc information-centric network (ICN), comprising:

• the producer device configured to receive a discovery interest from an application in a consumer device including an associated service name or prefix signed by an encryption key using the ICN;
• the producer device including a producer device publishing and discovery protocol (SPDP) on an ICN stack configured to receive the discovery interest from the ICN and check to see if there is a local published service that matches the service name or prefix in the discovery interest, and if so, verify the consumer device using the encryption key;
• the producer device SPDP configured to return a data protocol data unit (PDU) to the consumer device configured to enable the consumer device to access the local published service;
• and
• the consumer device configured to establish routing with the producer device and receive the local published service;
• wherein the data PDU includes a random name, a service profile, and a public key, the random name corresponding to the service name or prefix;
• wherein all intermediate nodes between the consumer device and the producer device forwarding the discovery interest and the PDU are unaware of the service name or prefix.

A producer device for establishing secure discovery and secure communication in an ad hoc information-centric network (ICN), comprising:

• the producer device configured to receive a discovery interest from an application in a consumer device including an associated service name or prefix signed by an encryption key using the ICN;
• the producer device including a producer device publishing and discovery protocol (SPDP) on an ICN stack configured to receive the discovery interest from the ICN and check to see if there is a local published service that matches the service name or prefix in the discovery interest, and if so, verify the consumer device using the encryption key;
• the producer device SPDP configured to return a data protocol data unit (PDU) to the consumer device configured to enable the consumer device to access the local published service;
• and
• the consumer device configured to establish routing with the producer device and receive the local published service;
• wherein the data PDU includes a random name, a service profile, and a public key;
• wherein the random name is a pseudo-random name generated by the producer device, and the service profile is the matched local published service including a real service name.

A producer device for establishing secure discovery and secure communication in an ad hoc information-centric network (ICN), comprising:

• the producer device configured to receive a discovery interest from an application in a consumer device including an associated service name or prefix signed by an encryption key using the ICN;
• the producer device including a producer device publishing and discovery protocol (SPDP) on an ICN stack configured to receive the discovery interest from the ICN and check to see if there is a local published service that matches the service name or prefix in the discovery interest, and if so, verify the consumer device using the encryption key;
• the producer device SPDP configured to return a data protocol data unit (PDU) to the consumer device configured to enable the consumer device to access the local published service;
• and
• the consumer device configured to establish routing with the producer device and receive the local published service;
• wherein the data PDU includes a random name, a service profile, and a group session key;
• wherein the producer device is configured to receive discovery interests from multiple consumer devices including an associated service name or prefix encrypted by the group session key.