Information-Centric Future Mobile and Wireless Access Networks

Transcription

1 Information-Centric Future Mobile and Wireless Access Networks George C. Polyzos Mobile Multimedia Laboratory Department of Informatics School of Information Sciences and Technology Athens University of Economics and Business Athens, Greece Tel.: , Fax: AUEB/MMlab Collaborators Faculty: G. Xylomenos, V. Siris, G. Marias, St. Toumpis PostDocs: N. Fotiou, P. Frangoudis PhD students: I. Thomas, C. Tsilopoulos, X. Vasilakos MSc students: D. Dimopoulos, A. Tsolakou

2 Outline Information-Centric Networking (ICN) Motivation, history, approaches Pub-Sub Internetworking (PSI): unique features About the MMlab: people and other projects φsat: The role of Satellites in the Future Internet SatNEx: Satellite Network of Experts POINT: IP Over ICN - The Better IP? Other/different projects I-CAN: Information-Centric Access Networks Overview/approach Architecture Results and publications [email protected] 2

3 Internet History and Outlook At the beginning cooperation; no competition no commercial traffic! endpoint-centric services/e2e Now Content distribution >50% of traffic today is video Overlays DPI by ISPs Trust? Endpoint trust? E2E? viruses, phishing, DoS attacks NAT, firewalls, middleboxes, CDNs The sender has the power Tussles e.g.: privacy vs. accountability towards Information-Centric Networking Connecting Wires the past Interconnecting Computers the current Internet evolutionary development started decades earlier Interconnecting Information the Future Internet revolutionary research years in the future tussle resolution at or near run-time Trust-to-Trust principle 3

4 Publish-Subscribe Internet Vision information centrism everything is information & information is everything Recursive & and generalized use of publish-subscribe enables dynamic change of roles between actors Network cache publishes info (cached) subscribes to get info to cache Access Points publish ID mobiles subscribe Objectives Specify, implement, & test an internetworked pub/sub architecture follow a clean-slate design approach Perform qualitative and quantitative evaluation Security and socio-economics important! Migration and incentive scenarios important (e.g., overlay)! [email protected] 4

5 ICN timeline papers/talks projects Van Jacobson CCN A Survey of Information-Centric Networking Research, IEEE Communications Surveys and Tutorials, vol. 16, no. 2, [email protected] 5

6 Content Centric Networking (CCN) / Named Data Networking (NDN) PARC NDN /2 NSF UCLA, [email protected] 6

7 MobilityFirst 160 bit Globally Unique Identifier (GUID) for each information object, device, service GUID translated into a network address (IP) through a Global Name Resolution Service (GNRS) publishers register GUIDs to GNRS and subscribers perform requests/queries routing takes place based on the network address [email protected] 7

8 Our ICN-related Research Projects PSIRP: Publish Subscribe Internet Routing Paradigm FP7 ICT STREP, the basis focus on (inter)-networking PURSUIT: Publish Subscribe Internet Technologies FP7 ICT STREP, extending, above & below the Internet layer optical, wireless, mobility, transport Euro-NF: Anticipating the Network of the Future From Theory to Design FP7 ICT Network of Excellence, ASPECTS, GOVPIMIT, E-key-nets EIFFEL: Evolved Internet Future For European Leadership FP7 ICT SSA, ; Think-Tank continued June 2011 MIT: Information-Centric Networking φsat: The Role of Satellites in Future Internet Services European Space Agency funded I-CAN: Information-Centric Future Access Networks NSRF (Greece), POINT: IP Over ICN- The better IP H2020 ICT STREP, [email protected] 8

9 Publish-Subscribe Internetworking (PSI) Key Functions and Components publish subscribe rendezvous Rendezvous ID: hash of content (/name) asynchronous and multicast restores the imbalance of power sender/receiver(s) + Scope ID: aggregation, policies PSI Basic Functions: RTF Rendezvous: Matches publications with subscriptions and initializes forwarding Topology: Monitors the network and creates information delivery paths Forwarding G. Xylomenos et al., Caching and Mobility Support in a Publish-Subscribe Internet Architecture, IEEE Communications Magazine, July [email protected] 9

10 PSI Identifiers 10

11 PSI Unique Features Fast forwarding Bloom filter based forwarding ( forwarding identifiers) simple, stateless, fast forwarding incl. for multicast path ( source ) routing path as compact Bloom filter carried on packets Centralized SDN compatible approach (intra-domain) routing/resource allocation topology discovery/management recursive use of pub/sub object level chunk/packet level pull transport, error control, rcvr flow control = slow & fast rendezvous topology formation: handover = subscribe to network [email protected] 11

12 Secure Forwarding Mechanism (LIPSIN) Forwarding based on Bloom filter (called zfilter) that contains all the link IDs through which a packet has to travel Supports multicast Hashing False positives Limitations in size Hierarchical / inter-networks Link identifiers are unique zfilter creation involves an encryption mechanism DoS attack resistant Almost impossible to redirect an information flow send arbitrary packets to a destination [email protected] 12

13 zfilters Based Forwarding (LIPSIN) P. Jokela, et al., LIPSIN: Line Speed Publish/ Subscribe Inter-networking, Proc. ACM SIGCOMM

14 Prototype Implementations & Testbeds PSIRP 2. PURSUIT Testbed (w/ Blackadder) 25 nodes 5 countries: UK, FI, GR, D, US Tunneled (VPN) over the public Internet PURSUIT 1. PSIRP Testbed (w/ Blackhawk) 6 countries: UK, FI, GR, D, BU, US In addition: Belgium during ICT demos Tunneled over the public Internet +dedicated fiber where available 3. φsat Testbed w/ SAT emulation D. Trossen and G. Parisis, Designing and realizing an information-centric internet, IEEE Communications Magazine, vol. 50, July [email protected] 14

15 An Information-Centric Overlay Network Architecture for Content Distribution and Mobility Support Ph.D. Dissertation by Konstantinos Katsaros Multicast Router Assisted Overlay Multicast (RAOM) Deploying multicast functionality in an overlay fashion Multicast & Caching MultiCache Enabling caching of data delivered by multicast trees Adapting to the inter-network structure H-Pastry Canonical version of Pastry Mobility Support Overlay Multicast Assisted Mobility (OMAM) Revisiting multicast assisted mobility K.V. Katsaros, G. Xylomenos, G.C. Polyzos, MultiCache: an Overlay Architecture for Information-Centric Networking, Computer Networks, vol. 55, no. 4, pp , Special Issue on Architectures and Protocols for the Future Internet, March

16 Outlook & Open Issues Scalability and Performance Issues Scalable global rendezvous Transport protocols Multimedia distribution N. Fotiou, K.V. Katsaros, G. Xylomenos, G.C. Polyzos, H-Pastry: An inter-domain topology aware overlay for the support of name-resolution services in the future Internet, Computer Communications, Elsevier (online 2/15). Y. Thomas, C. Tsilopoulos, G. Xylomenos, G.C. Polyzos, Accelerating File Downloads in Publish Subscribe Internetworking with Multisource and Multipath Transfers, Proc. World Telecommunications Congress, Berlin, Germany, 6/2014. C. Tsilopoulos, G. Xylomenos, G.C. Polyzos, Are Information-Centric Networks Video-Ready? Proc. PV2013, San Jose, CA, December Security and privacy Deployment and Interoperability Issues Cheap ICN? http only? Internet of Things opportunity! 16

17 PSI Security & Privacy in addition to intrinsic ICN security features Publisher and Subscriber do not know each other Scopes: PSI s information firewalls Bloom filter path cannot be replayed rotation of link IDs DoS attacks to publishers/subscribers eradicated Rendezvous (point/network) knows much Privacy wrt: publisher: great (at network & higher layers) rendezvous (broker): bad proposal: use Homomorphic Encryption N. Fotiou, D. Trossen, G.F. Marias, A. Kostopoulos, G.C. Polyzos, Enhancing Information Lookup Privacy through Homomorphic Encryption, Security and Communication Networks (to appear). Access Control Delegation important for fast effective and efficient caching N. Fotiou, G.F. Marias, G.C. Polyzos, Access Control Enforcement Delegation for Information-Centric Networking Architectures, ACM SIGCOMM Computer Communication Review, Vol. 42, No. 4, Oct [email protected] 17

18 ICN Security & Privacy ACM ICN 2014 (Paris) ICN Privacy and Name based Security (Fotiou & Polyzos) Remarks ICN-IP relationship Some of the techniques are adapted for ICN from the existing IP networks More generally, many of techniques are also applicable to the existing IP networks Same for threats and objectives but there are also differences Important open issues Performance trade offs on a concrete system Caching vs. Privacy vs. Confidentiality Governance and authorities On non random identifiers (human readable) e.g., details on naming Shared responsibility for important decisions or actions, departure from single TTP models Bitcoin vs. Certificates/PKI Byzantine agreement, NSA free architectures Global policies Traffic engineering [email protected] 18

19 ICN Research Community workshops with ACM SIGCOMM ICN 2011 (Toronto) ICN 2012 (Helsinki) ICN 2013 (Hong Kong) with IEEE INFOCOM NOMEN 2012, st ACM SIGCOMM ICN Conference Paris Sept nd ACM SIGCOMM ICN Conference San Francisco, end Sept ICNRG@IERTF Journals & Magazines Special Issues [email protected] 19

20 POINT: IP Over ICN - The Better IP? Project Running: 1/1/ /12/2017 Partners: Aalto U (co-ordinator), ELL-i (FI) Intracom Telecom, AUEB (GR) RWTH Aachen (DE) Primetel (CY) CTVC Ltd, Interdigital, U Essex (UK) Concept Premise: IP apps can do better over ICN Need to define what better means Better utilisation in HTTP streaming scenarios Better privacy of personal data and metadata Better management of virtual network paths Better (fairer) content distribution Focus 1 provider UE: no changes (required) ICN used internally ICN could be exposed to UE [email protected] 20

21 Faculty Involved in I-CAN George C. Polyzos, Director Giannis Marias George Xylomenos Vasilios A. Siris Stavros Toumpis Other faculty Iordanis Koutsopoulos Vana Kalogeraki George Papaioannou Andreas Veneris Senior Researchers/PostDocs Merkourios Karaliopoulos, PhD Nikos Fotiou, PhD Vaggelis Douros, PhD Ph.D. students Xenofon Vasilakos Yannis Thomas Charilaos Stais Christos Tsilopoulos MSc students Researchers Undergraduate students 21

22 Information-Centric future mobile and wireless Access Networks Motivation: Mobiles have multiple wireless interfaces Different wireless access technologies have different characteristics Mobility presents new challenges and opportunities 3G/4G Wi-Fi hotspot Objectives are to investigate ICN architecture requirements & features for mobile/wireless access networks multi-source, multi-path, multi-interface in-network and proactive caching privacy support D2D/ Wi-Fi direct 22

23 I-CAN Architecture Features Publication proxies: store and advertise content on behalf of content owners Content remains available even when owner is offline Subscription proxies: send subscriptions on behalf of actual receivers Beneficial if users are mobile and have disconnections Can exploit proactive caching Future content & persistent subscriptions Can reduce signaling overhead in cellular and contention-based access networks 23

24 More I-CAN Architecture Features Content names: need for naming structure supporting both global and local significance Centralized, decentralized, and fast rendezvous Centralized: few nodes perform rendezvous Decentralized: even mobiles perform rendezvous; appropriate for local access networks Multi-source, multi-interface content transfer Exploits multiple network technologies: cellular, Wi-Fi, D2D Content-centric security & privacy 24

25 Mobile Multi-Source Video Streaming Exploit multi-source & multi-interface for lower cost resilience better QoE Mobility-based proactive caching Influence of multi-rate Wi-Fi 25

26 I-CAN Video-Streaming Emulation Experiments (& Demos ) Topology Description Each of the experiments involves a topology and a route described by an xml file An Android device parses this file in order to learn the topology and scenario Scenarios Streaming w/ & w/out Caching Multisource Streaming Fault Tolerance Wi-Fi Direct Data link User s path A 3G B [email protected] 26

27 Secure Publisher Proxy Combines Identity Based Encryption (IBE) Proxy re-encryption The content owner encrypts content using a (different) symmetric encryption key Each symmetric key is encrypted using IBE with the owner s identity To access encrypted content, the subscriber needs to decrypt the symmetric encryption key by having the proxy re-encrypt the symmetric key and derive C Subscriber from C Owner [email protected] 27

28 Q-ICN (I-CAN) Workshop w/ QSHINE 2014 (Aug. 20, Rhodes) Open Call MMlab/I-CAN (++) papers G.C. Polyzos, V.A. Siris, G. Xylomenos, G.F. Marias, S. Toumpis, I- CAN: Information-Centric Future Mobile and Wireless Access Networks. P. Frangoudis G.C. Polyzos, G.Rubino, Content Dissemination in Wireless Networks Exploiting Relaying and Information-Centric Architectures. (+ INRIA) N. Fotiou and G.C. Polyzos, Realizing the Internet of Things using Information-Centric Networking. V. Douros, N. Fotiou, and G.C. Polyzos, Fighting packet storms in mobile networks with information-centrism. X. Vasilakos, V. A. Siris, Adapting Data Popularity in Mobilitybased Proactive Caching Decisions for Heterogeneous Wireless Networks. Y. Thomas, G. Xylomenos, Towards Improving the Efficiency of ICN Packet-Caches. 28

29 Thank you! Information-Centric Future Mobile and Wireless Access Networks George C. Polyzos Mobile Multimedia Laboratory Department of Informatics School of Information Sciences and Technology Athens University of Economics and Business Athens, Greece

30 Selected MMlab ICN Publications G. Xylomenos, et al., A Survey of Information-Centric Networking Research IEEE Communications Surveys and Tutorials, (online since 19 July 2013). G. Xylomenos, X. Vasilakos, C. Tsilopoulos, V.A. Siris, G.C. Polyzos, Caching and Mobility Support in a Publish-Subscribe Internet Architecture, IEEE Communications Magazine, July N. Fotiou, G.F. Marias, G.C. Polyzos, Access Control Enforcement Delegation for Information-Centric Networking Architectures, ACM SIGCOMM Computer Communication Review, Oct N. Fotiou, D. Trossen, G.F. Marias, A. Kostopoulos, G.C. Polyzos, Enhancing Information Lookup Privacy through Homomorphic Encryption, Security and Communication Networks (online since Nov. 15, 2013). N. Fotiou, K. Katsaros, G.C. Polyzos, M. Sarela, D. Trossen, G. Xylomenos, Handling Mobility in Future Publish-Subscribe Information-Centric Networks, Telecommunication Systems, Springer (online since July 2013). K.V. Katsaros, G. Xylomenos, G.C. Polyzos, MultiCache: an Overlay Architecture for Information-Centric Networking, Computer Networks, Elsevier, March [email protected] 30

31 Selected I-CAN Publications D. Dimopoulos, Ch. Boursinos, and V.A. Siris, Multi-Source Mobile Video Streaming: Load Balancing, Fault Tolerance, and Offloading with Prefetching, Proc. 9th Int'l Conference on Testbeds and Research Infrastructures for the Development of Networks & Communities (TRIDENTCOM), May V.A. Siris, X. Vasilakos, G.C. Polyzos, Efficient Proactive Caching for Supporting Seamless Mobility, Proc. IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks (WoWMoM), Sydney, Australia, June Y. Thomas, C. Tsilopoulos, G. Xylomenos, G.C. Polyzos, Accelerating File Downloads in Publish Subscribe Internetworking with Multisource and Multipath Transfers, Proc. World Telecommunications Congress (WTC), Berlin, Germany, June K.V. Katsaros, X. Vasilakos, T. Okwii, G. Xylomenos, G. Pavlou, and G.C. Polyzos, On the Inter-domain Scalability of Route-by-Name Information-Centric Network Architectures, IFIP Networking N. Fotiou, A. Machas, G.C. Polyzos, G. Xylomenos, Access control as a service for the Cloud, Journal of Internet Services and Applications, Springer (in press). G.C. Polyzos and N. Fotiou, Building a reliable Internet of Things using Information- Centric Networking, Journal of Reliable Intelligent Environments, Springer (available online 1 May 2015). [email protected] 31