Design Elements » History » Version 8
Suravi Regmi, 11/21/2025 08:22 PM
| 1 | 1 | Suravi Regmi | # Design Elements |
|---|---|---|---|
| 2 | This is the technical reference section. |
||
| 3 | 4 | Suravi Regmi | |
| 4 | ### **[[Naming_Scheme|Naming Scheme]]** |
||
| 5 | 1 | Suravi Regmi | Stream naming hierarchy (include diagram from paper) |
| 6 | Data naming: |
||
| 7 | /org/md2k/.../DATA/<timestamp> |
||
| 8 | |||
| 9 | Attribute names (/org/md2k/ATTRIBUTE/...) |
||
| 10 | |||
| 11 | Manifest naming (.../MANIFEST/<seq>) |
||
| 12 | |||
| 13 | CK naming conventions |
||
| 14 | |||
| 15 | DKEY naming conventions |
||
| 16 | |||
| 17 | PUBPARAMS naming |
||
| 18 | |||
| 19 | 5 | Suravi Regmi | ### **[[Trust Model|Trust Model]]** |
| 20 | 1 | Suravi Regmi | |
| 21 | Trust anchor |
||
| 22 | |||
| 23 | Component identities |
||
| 24 | |||
| 25 | Cert verification |
||
| 26 | |||
| 27 | Signing chain |
||
| 28 | |||
| 29 | What each module verifies |
||
| 30 | |||
| 31 | 6 | Suravi Regmi | ### **[[Access Control|Access Control + Policy Structure]]** |
| 32 | 1 | Suravi Regmi | |
| 33 | New policy structure (requester, allow/deny filters) |
||
| 34 | |||
| 35 | Example policy with evolution from old → new format |
||
| 36 | |||
| 37 | Filter semantics |
||
| 38 | |||
| 39 | Mapping to attributes |
||
| 40 | |||
| 41 | 7 | Suravi Regmi | ### **[[NAC-ABE Design|NAC-ABE Design]]** |
| 42 | 1 | Suravi Regmi | Why KP-ABE |
| 43 | |||
| 44 | Data encryption → CK encryption → CK decryption |
||
| 45 | |||
| 46 | ABE encryption of CK (black box) |
||
| 47 | |||
| 48 | ABE key issuance (DKEY) |
||
| 49 | |||
| 50 | CK granularity (second/minute/hour) |
||
| 51 | |||
| 52 | Tradeoffs of CK reuse level |
||
| 53 | |||
| 54 | 7 | Suravi Regmi | ### **[[Manifest Design|Manifest Design]]** |
| 55 | 1 | Suravi Regmi | |
| 56 | Why manifests exist |
||
| 57 | |||
| 58 | Manifest format (full data names + digest) |
||
| 59 | |||
| 60 | Creation triggers: count/time threshold |
||
| 61 | |||
| 62 | Sequential numbering scheme |
||
| 63 | |||
| 64 | How manifests replace per-data sync announcements |
||
| 65 | 7 | Suravi Regmi | ### **[[PSync Design|PSync Design]]** |
| 66 | 2 | Suravi Regmi | |
| 67 | 1 | Suravi Regmi | |
| 68 | Why PSync is used |
||
| 69 | |||
| 70 | How the sync list works conceptually |
||
| 71 | |||
| 72 | Manifest announcement via PSync |
||
| 73 | |||
| 74 | Differences from classical pub-sub |
||
| 75 | |||
| 76 | Limitations / assumptions |
||
| 77 | |||
| 78 | Boundaries (MGuard-specific usage, not raw PSync theory) |
||
| 79 | 7 | Suravi Regmi | ### **[[Pub-Sub API|Pub-Sub API Design (MGuard Perspective)]]** |
| 80 | 1 | Suravi Regmi | |
| 81 | |||
| 82 | Producer API: publish() |
||
| 83 | |||
| 84 | Consumer API: subscribe() |
||
| 85 | |||
| 86 | Callback delivery |
||
| 87 | |||
| 88 | Reliability guarantees |
||
| 89 | 8 | Suravi Regmi | |
| 90 | ### **[[Repo|Repo]]** |
||
| 91 | NDN-Python Repo and its ussage in MGuard |