An architecture for secure wide-area service discovery

被引:39
作者
Hodes, TD [1 ]
Czerwinski, SE [1 ]
Zhao, BY [1 ]
Joseph, AD [1 ]
Katz, RH [1 ]
机构
[1] Univ Calif Berkeley, Div Comp Sci, Berkeley, CA 94720 USA
关键词
network protocols; service discovery; location services; name lookup;
D O I
10.1023/A:1013772027164
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
The widespread deployment of inexpensive communications technology, computational resources in the networking infrastructure, and network-enabled end devices poses an interesting problem for end users: how to locate a particular network service or device out of hundreds of thousands of accessible services and devices. This paper presents the architecture and implementation of a secure wide-area Service Discovery Service (SDS). Service providers use the SDS to advertise descriptions of available or already running services, while clients use the SDS to compose complex queries for locating these services. Service descriptions and queries use the eXtensible Markup Language (XML) to encode such factors as cost, performance, location, and device- or service-specific capabilities. The SDS provides a fault-tolerant, incrementally scalable service for locating services in the wide-area. Security is a core component of the SDS: communications are both encrypted and authenticated where necessary, and the system uses a hybrid access control list and capability system to control access to service information, Wide-area query routing is also a core component of the SDS: all information in the system is potentially reachable by all clients.
引用
收藏
页码:213 / 230
页数:18
相关论文
共 56 条
[1]  
AMIR E, 1998, P SIGCOMM 98
[2]  
ANDERSON TE, 1995, IEEE MICRO FEB
[3]  
[Anonymous], 2001, UCBCSD011141
[4]  
[Anonymous], 1998, RFC2327 IETF
[5]  
[Anonymous], 1998, P 7 IEEE INT S HIGH
[6]  
[Anonymous], 2165 IETF RFC
[7]  
Bindel D., 2000, P 9 INT C ARCH SUPP
[8]   SPACE/TIME TRADE/OFFS IN HASH CODING WITH ALLOWABLE ERRORS [J].
BLOOM, BH .
COMMUNICATIONS OF THE ACM, 1970, 13 (07) :422-&
[9]  
BRAY T, 1998, EXTENSIBLE MARKUP LA
[10]  
CHAWATHE Y, 2000, ARCHITECTURE INTERNE