System for key exchange in a content centric network

A computer system for facilitating secure communication between computing entities, the system comprising:

• a processor;
• and
• a storage device storing instructions that when executed by the processor cause the processor to perform a method, the method comprising:
• generating, by a content-consuming device, a first key based on a first consumer-share key and a previously received producer-share key, and performing a key derivation function based on the first consumer-share key and the first producer-share key;
• constructing a first interest packet that includes the first consumer-share key and a nonce token which is used as a pre-image of a previously generated first nonce, wherein the first interest packet has a name that includes a first prefix, and wherein the first nonce is used to establish a session between the content-consuming device and a content-producing device;
• in response to the nonce token being verified by the content-producing device, receiving a first content-object packet with a payload that includes a first resumption indicator encrypted based on a second key;
• and
• generating the second key based on a second consumer-share key and the first content-object packet.