SYSTEM AND METHOD FOR PERFORMING KEY RESOLUTION OVER A CONTENT CENTRIC NETWORK

摘要

A key-resolution service (KRS) enables a client device to verify that content objects are signed by a trusted entity. During operation, the KRS service can receive an interest that includes a KRS query for a content name needed to be decided. The KRS service obtains the content name from the interest, and obtains a KRS record that includes security information for the content name or a prefix of the content name. The KRS service then returns a content object whose payload includes the KRS record to satisfy a first interest. The client device can query the KRS service to obtain a trusted key associated with at least one name prefix of the content object and, if necessary, can disseminate interests to obtain keys which complete a chain of trust between the trusted key and a key used to authenticate the content object.