The Missing Piece: On Namespace Management in NDN and How DNSSEC - - PowerPoint PPT Presentation

▶
the missing piece on namespace management in ndn and how
SMART_READER_LITE
LIVE PREVIEW

The Missing Piece: On Namespace Management in NDN and How DNSSEC - - PowerPoint PPT Presentation

Nov 09, 2022 619 likes •1.2k views

The Missing Piece: On Namespace Management in NDN and How DNSSEC Might Help Pouyan Fotouhi Tehrani 1 , Eric Osterweil 2 , Jochen Schiller 3 , Thomas C. Schmidt 4 , Mathias W ahlisch 3 1 Weizenbaum Institut / Fraunhofer FOKUS 2 George Mason

slide-1
SLIDE 1

The Missing Piece: On Namespace Management in NDN and How DNSSEC Might Help

Pouyan Fotouhi Tehrani1, Eric Osterweil2, Jochen Schiller3, Thomas C. Schmidt4, Mathias W¨ ahlisch3

1Weizenbaum Institut / Fraunhofer FOKUS 2George Mason University 3Freie Universit¨

at Berlin 4Hamburg University of Applied Sciences

September 25, 2019

1 / 11

slide-2
SLIDE 2
slide-3
SLIDE 3

Benjamin Franklin usatoday.com.co b l

  • m

b e r g . m a

slide-4
SLIDE 4

Benjamin Franklin usatoday.com.co b l

  • m

b e r g . m a

Oh, what a tangled web we weave, when first we practice to deceive!

– William Shakespeare

slide-5
SLIDE 5

Benjamin Franklin usatoday.com.co b l

  • m

b e r g . m a

Oh, what a tangled web we weave, when first we practice to deceive!

– William Shakespeare Walter Scot

slide-6
SLIDE 6

HOLD UP!

slide-7
SLIDE 7

HOLD UP!

Isn’t that what NDN DNS (NDNS) [Afanasyev, 2013] does?

slide-8
SLIDE 8

HOLD UP!

Isn’t that what NDN DNS (NDNS) [Afanasyev, 2013] does? ...or even CCN Key Resolution Service (CCN-KRS) [Mahadevan, 2014]?

slide-9
SLIDE 9

HOLD UP!

Isn’t that what NDN DNS (NDNS) [Afanasyev, 2013] does? ...or even CCN Key Resolution Service (CCN-KRS) [Mahadevan, 2014]?

JAIN!

slide-10
SLIDE 10

HOLD UP!

Isn’t that what NDN DNS (NDNS) [Afanasyev, 2013] does? ...or even CCN Key Resolution Service (CCN-KRS) [Mahadevan, 2014]?

JAIN!

YES. Technical aspects:

  • Self-certifying names
  • Trusted third parties (TTP)
  • ...
slide-11
SLIDE 11

HOLD UP!

Isn’t that what NDN DNS (NDNS) [Afanasyev, 2013] does? ...or even CCN Key Resolution Service (CCN-KRS) [Mahadevan, 2014]?

JAIN!

YES. Technical aspects:

  • Self-certifying names
  • Trusted third parties (TTP)
  • ...

NO. Non-technical aspects:

  • Trademarks
  • Legal disputes
  • ...
slide-12
SLIDE 12

* Graphics licensed under CC-BY 4.0 – Twiter, Inc and other contributors

Internet Phone Book

slide-13
SLIDE 13

* Graphics licensed under CC-BY 4.0 – Twiter, Inc and other contributors

Internet Phone Book How entries are entered and read from phonebook. IETF for DNS

slide-14
SLIDE 14

* Graphics licensed under CC-BY 4.0 – Twiter, Inc and other contributors

Internet Phone Book How entries are entered and read from phonebook. IETF for DNS How to decide what names should be entered in the phonebook. ICANN for DNS

slide-15
SLIDE 15

* Graphics licensed under CC-BY 4.0 – Twiter, Inc and other contributors

Internet Phone Book How entries are entered and read from phonebook. IETF for DNS How to decide what names should be entered in the phonebook. ICANN for DNS Ofen contentious...

slide-16
SLIDE 16

* Graphics licensed under CC-BY 4.0 – Twiter, Inc and other contributors

But, why did we wind up needing this (for DNS)? Internet Phone Book How entries are entered and read from phonebook. IETF for DNS How to decide what names should be entered in the phonebook. ICANN for DNS Ofen contentious...

But, why did we wind up needing this for (global) naming?

slide-17
SLIDE 17

1998: ICANN Green/White Paper 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 RFC 1296 ISC 1983: RFC 882 year domain names (#)

5 / 11

slide-18
SLIDE 18

1998: ICANN Green/White Paper 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 RFC 1296 ISC 1983: RFC 882 1987: RFC 1034 year domain names (#)

5 / 11

slide-19
SLIDE 19

1998: ICANN Green/White Paper 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 RFC 1296 ISC 1983: RFC 882 1987: RFC 1034 .com boom year domain names (#)

5 / 11

slide-20
SLIDE 20

1998: ICANN Green/White Paper 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 RFC 1296 ISC 1983: RFC 882 1987: RFC 1034 .com boom 1994: RFC 1591 “It is up to the requestor to be sure he is not violating anyone else’s Trademark.” year domain names (#)

5 / 11

slide-21
SLIDE 21

1998: ICANN Green/White Paper 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 RFC 1296 ISC 1983: RFC 882 1987: RFC 1034 .com boom year domain names (#) 1996: First court ruling in Germany Domain names are comparable to “telephone numbers, bank routing numbers or postal codes.”

5 / 11

slide-22
SLIDE 22

1998: ICANN Green/White Paper 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 RFC 1296 ISC 1983: RFC 882 1987: RFC 1034 .com boom 1997: Initiating DNS Privatization year domain names (#)

5 / 11

slide-23
SLIDE 23

1998: ICANN Green/White Paper 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 RFC 1296 ISC 1983: RFC 882 1987: RFC 1034 .com boom 1997: Initiating DNS Privatization 1997: Court ruling in Germany Domain names indicate origin and can be related to natural and legal persons. year domain names (#)

5 / 11

slide-24
SLIDE 24

1998: ICANN Green/White Paper 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 RFC 1296 ISC 1983: RFC 882 1987: RFC 1034 .com boom 1997: Initiating DNS Privatization year domain names (#)

5 / 11

slide-25
SLIDE 25

1998: ICANN Green/White Paper 1999: UDRP Launch 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 RFC 1296 ISC 1983: RFC 882 1987: RFC 1034 .com boom 1997: Initiating DNS Privatization year domain names (#)

5 / 11

slide-26
SLIDE 26

1998: ICANN Green/White Paper 1999: UDRP Launch 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 1000 2000 3000 4000 RFC 1296 ISC 1983: RFC 882 1987: RFC 1034 .com boom 1997: Initiating DNS Privatization year domain names (#) dispute cases before WIPO (#)

5 / 11

slide-27
SLIDE 27

1998: ICANN Green/White Paper 1999: UDRP Launch 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 1000 2000 3000 4000 RFC 1296 ISC 1983: RFC 882 1987: RFC 1034 .com boom 1997: Initiating DNS Privatization year domain names (#) dispute cases before WIPO (#) 2003: RFC 3467 “Increasing commercialization of the Internet, and visibility of domain names that are assumed to match names of companies or products, has turned the DNS and DNS names into a trademark batleground.”

5 / 11

slide-28
SLIDE 28

1998: ICANN Green/White Paper 1999: UDRP Launch 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 1000 2000 3000 4000 RFC 1296 ISC 1983: RFC 882 1987: RFC 1034 .com boom 1997: Initiating DNS Privatization year domain names (#) dispute cases before WIPO (#) 2006: RFC 4367 “[...] there has been a strong demand to acquire names that have significance to people, through equivalence to registered trademarks, company names, types of services, and so on. There is a danger in this trend [...]”

5 / 11

slide-29
SLIDE 29

1998: ICANN Green/White Paper 1999: UDRP Launch 1985 1990 1995 2000 2005 2010 2015 2020 103 104 105 106 107 108 109 1010 1000 2000 3000 4000 RFC 1296 ISC 1983: RFC 882 1987: RFC 1034 .com boom 1997: Initiating DNS Privatization year domain names (#) dispute cases before WIPO (#)

Lessons learnt:

  • 1. Names are not just labels used to identify things,

they require policy and context.

  • 2. If ICN is to experience its own boom, holistic

namespace management is required.

5 / 11

slide-30
SLIDE 30

Agenda

Introduction Namespace Management in ICN NDNSSEC: NDN + DNSSEC Conclusion and Research Roadmap

6 / 11

slide-31
SLIDE 31

Agenda

Introduction Namespace Management in ICN NDNSSEC: NDN + DNSSEC Conclusion and Research Roadmap

6 / 11

slide-32
SLIDE 32

Namespace Management Concept

Generic ICN

ICN Namespace N

slide-33
SLIDE 33

Namespace Management Concept

Generic ICN

ICN Namespace N Zone Zi ∈ Z Divided Into Zones

slide-34
SLIDE 34

Namespace Management Concept

Generic ICN

ICN Namespace N Zone Zi ∈ Z Divided Into Zones Zone Owner manages Producers authorizes

slide-35
SLIDE 35

Namespace Management Concept

Generic ICN

ICN Namespace N Zone Zi ∈ Z Divided Into Zones Zone Owner manages Producers authorizes provision under

7 / 11

slide-36
SLIDE 36

Agenda

Introduction Namespace Management in ICN NDNSSEC: NDN + DNSSEC Conclusion and Research Roadmap

8 / 11

slide-37
SLIDE 37

NDNSSEC

DNS Zone Space . com.

  • rg.

ietf.org. tools.ietf.org.

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ...

Excerpt of DNS zone records

slide-38
SLIDE 38

NDNSSEC: DNS Zone Appropriation for NDN

ndnified DNS Zone Space / /com /org /org/ietf /org/ietf/tools

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ...

Excerpt of DNS zone records

slide-39
SLIDE 39

NDNSSEC: Producer Authorization

ndnified DNS Zone Space / /com /org /org/ietf /org/ietf/tools

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ...

Excerpt of DNS zone records Producer Zone Owner

slide-40
SLIDE 40

NDNSSEC: Producer Authorization

ndnified DNS Zone Space / /com /org /org/ietf /org/ietf/tools

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ...

Excerpt of DNS zone records Producer Zone Owner provides credentials

slide-41
SLIDE 41

NDNSSEC: Producer Authorization

ndnified DNS Zone Space / /com /org /org/ietf /org/ietf/tools

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ... tools.ietf.org 1800 IN DNSKEY XXX X X ...

Excerpt of DNS zone records Producer Zone Owner provides credentials enlists credentials

slide-42
SLIDE 42

NDNSSEC: Data Publishing

ndnified DNS Zone Space / /com /org /org/ietf /org/ietf/tools

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ... tools.ietf.org 1800 IN DNSKEY XXX X X ...

Excerpt of DNS zone records

/html/rfc882 Meta Info Content

Data Packet Producer

slide-43
SLIDE 43

NDNSSEC: Data Publishing

ndnified DNS Zone Space / /com /org /org/ietf /org/ietf/tools

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ... tools.ietf.org 1800 IN DNSKEY XXX X X ...

Excerpt of DNS zone records

/org/ietf/tools/html/rfc882 Meta Info Content

Data Packet Producer prefix w/ zone apex

slide-44
SLIDE 44

NDNSSEC: Data Publishing

ndnified DNS Zone Space / /com /org /org/ietf /org/ietf/tools

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ... tools.ietf.org 1800 IN DNSKEY XXX X X ...

Excerpt of DNS zone records

/org/ietf/tools/html/rfc882 Meta Info Content Signature

Data Packet Producer prefix w/ zone apex sign

slide-45
SLIDE 45

NDNSSEC: Data Publishing

ndnified DNS Zone Space / /com /org /org/ietf /org/ietf/tools

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ... tools.ietf.org 1800 IN DNSKEY XXX X X ...

Excerpt of DNS zone records

/org/ietf/tools/html/rfc882 Meta Info Content Signature

Data Packet Producer prefix w/ zone apex sign register

  • n NDN
slide-46
SLIDE 46

NDNSSEC: Producer Authentication

ndnified DNS Zone Space / /com /org /org/ietf /org/ietf/tools

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ... tools.ietf.org 1800 IN DNSKEY XXX X X ...

Excerpt of DNS zone records

/org/ietf/tools/html/rfc882 Meta Info Content Signature

Data Packet Consumer

slide-47
SLIDE 47

NDNSSEC: Producer Authentication

ndnified DNS Zone Space / /com /org /org/ietf /org/ietf/tools

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ... tools.ietf.org 1800 IN DNSKEY XXX X X ...

Excerpt of DNS zone records

/org/ietf/tools/html/rfc882 Meta Info Content Signature

Data Packet Consumer retrieves

slide-48
SLIDE 48

NDNSSEC: Producer Authentication

ndnified DNS Zone Space / /com /org /org/ietf /org/ietf/tools

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ... tools.ietf.org 1800 IN DNSKEY XXX X X ...

Excerpt of DNS zone records

/org/ietf/tools/html/rfc882 Meta Info Content Signature

Data Packet Consumer retrieves fetches credentials

slide-49
SLIDE 49

NDNSSEC: Producer Authentication

ndnified DNS Zone Space / /com /org /org/ietf /org/ietf/tools

tools.ietf.org 1800 IN RRSIG DNSKEY 7 2 1800 ... tools.ietf.org 1800 IN DNSKEY 256 3 6 ... tools.ietf.org 1800 IN DNSKEY 257 3 7 ... tools.ietf.org 1800 IN DNSKEY XXX X X ...

Excerpt of DNS zone records

/org/ietf/tools/html/rfc882 Meta Info Content Signature

Data Packet Consumer retrieves fetches credentials verifies signature

9 / 11

slide-50
SLIDE 50

Conclusion and Research Roadmap Multi-stakeholder scenarios require namespace management.

10 / 11

slide-51
SLIDE 51

Conclusion and Research Roadmap Multi-stakeholder scenarios require namespace management.

Where we are ✔ Ecosystem to globally manage and secure names (based on DNS)

10 / 11

slide-52
SLIDE 52

Conclusion and Research Roadmap Multi-stakeholder scenarios require namespace management.

Where we are ✔ Ecosystem to globally manage and secure names (based on DNS) ✔ Prototype to synergize with NDN

10 / 11

slide-53
SLIDE 53

Conclusion and Research Roadmap Multi-stakeholder scenarios require namespace management.

Where we are ✔ Ecosystem to globally manage and secure names (based on DNS) ✔ Prototype to synergize with NDN

10 / 11

slide-54
SLIDE 54

Conclusion and Research Roadmap Multi-stakeholder scenarios require namespace management.

Where we are ✔ Ecosystem to globally manage and secure names (based on DNS) ✔ Prototype to synergize with NDN Where we want to be ➜ DNS data w/o DNS transport

10 / 11

slide-55
SLIDE 55

Conclusion and Research Roadmap Multi-stakeholder scenarios require namespace management.

Where we are ✔ Ecosystem to globally manage and secure names (based on DNS) ✔ Prototype to synergize with NDN Where we want to be ➜ DNS data w/o DNS transport ➜ Evaluate performance and feasibility (synchronization disparities, etc.)

10 / 11

slide-56
SLIDE 56

Thanks! It’s time for

Qestions, Comments, and Criticisms.

11 / 11