MIN: Co-Governing Multi-Identifier Network Architecture and Its Prototype on Operator’s Network

Abstract

IP protocol is the core of TCP/IP network layer. However, since IP address and its Domain Name are allocated and managed by a single agency, there are risks of centralization. The semantic overload of IP address also reduces its scalability and mobility, which further hinders the security. This paper proposes a co-governing Multi-Identifier Network (MIN) architecture that constructs a network layer with parallel coexistence of multiple identifiers, including identity, content, geographic information, and IP address. On the management plane, we develop an efficient management system using consortium blockchain with voting consensus, so the network can simultaneously manage and support by hundreds or thousands of nodes with high throughput. On the data plane, we propose an algorithm merging hash table and prefix tree (HTP) for FIB, which avoids the false-negative error and can inter-translate different identifiers with tens of billions of entries. Further, we propose a scheme to transport IP packets using CCN as a tunnel for supporting progressive deployment. We deployed the prototype of MIN to the largest operators' network in Mainland China, Hongkong and Macao, and demonstrated that the network can register identifier under co-governing consensus algorithm, support VoD service very well. INDEX TERMS Future network architecture, consortium blockchain, HTP-FIB, APoV, MIN, MIS, MIR. I. INTRODUCTION The Internet architecture based on IP has continuously evolved during the last decades. Its end-to-end transmis-The associate editor coordinating the review of this manuscript and approving it for publication was Noor Zaman. sion mode accelerated its deployment worldwide. However, in IP based network, the allocation and management of IP addresses are controlled by a single agency. Such centralization brings risks. On the other hand, IP addresses represent both the location and the identity information of nodes, causing semantic overload. These problems hinder the scalability

Architecture of Sovereignty Network

“…(5) The sovereignty network can support 5G requirements and provide both wired and wireless data transmission. (6) The security of resources and content data within the sovereignty network should be guaranteed, that is, the sovereignty network should effectively prevent existing network attacks (such as worms and malicious traffic), as well as ensure the stable operation of the system. (7) The production and broadcasting network of radio and television programs can run online in real time.…”

“…(6) The security of resources and content data within the sovereignty network should be guaranteed, that is, the sovereignty network should effectively prevent existing network attacks (such as worms and malicious traffic), as well as ensure the stable operation of the system. (7) The production and broadcasting network of radio and television programs can run online in real time. (8) The sovereignty network can provide a better user experience for watching videos, such as faster video acquisition rate and more stable video playback.…”

“…How to quickly search, match and forward content requests on the router will be a problem. (7) The naming and addressing method used in IPv9 is a big challenge in searching and addressing quickly with huge amounts of identifiers. At the same time, the geographical location addressing scheme proposed by IPv9 requires the conversion of IP address and geographical location address.…”

“…Given the above background and functional requirements, the self-designed architecture MIN (Multi-Identifier Network) [6,7] is adopted as the main architecture of the sovereignty network. In this book, we use a broadcast television system as the application case to introduce the operational process of the sovereignty network.…”

“…(6) After the content is transmitted into the sovereignty network, firewall, packet detection, text recognition detection, audio recognition detection, image and video recognition detection, natural language processing, manual review and other mechanisms are used to filter the transmitted content layer by layer, to further ensure the security and reliability of the core network. (7) The CMD architecture is used for constructing the storage and core equipments to further ensure system security and real-time operation in the core network. (8) Other routine security mechanisms.…”