公益財団法人

セコム科学技術振興財団

研究成果報告書研究課題名ネットワークトラフィックに直接介入するサービス指向ルータにより展開される新たなスマートサービス
New-generation smart services provided by service-oriented router with novel
functions of network traffic analysis and content-based services

平成２６年

研究期間
４月 ～ 平成３０年

３月

報告年月
平成３０年 ６月

慶應義塾大学研究代表者
理工学部 システムデザイン工学科
西 宏章

教授

Department of System Design, Faculty of Science and Technology,
Keio University, Professor
Hiroaki Nishi

Abstract
Over 20 years have already passed since the first year of the Internet. We receive its benefits at
any moments. However, several problems become obvious. How to solve the network neutralityproblem? Why was innovative technology not proposed in Internet security? Why does it limit toend-to-end services? Why cannot it provide services which bear close on the network? Why does it
limit to IP-based routing? Why cannot it provide real-time services? What is the solution to theintrusion problem of private information? What is the solution for the heavy network load brought by
IoT devices? These questions should be solved soon. Here, we got a conclusion that the function andservices of Internet backbone router should be changed to give effective solutions for those problems.
Here, we started a study of designing and implementing Service-oriented Router (SoR). SoR isdifferent in its function from the general Internet routers or switches because it can handle thenetwork traffic contents directly at the core network of the Internet and other branches of theInternet. Therefore, SoR is required to capture network traffic and access to internal contents of thenetwork traffic. To achieve this special feature of SoR, it has the following functions. Firstly, itreconstructs over several million TCP streams at the same time with a small memory. Secondly, it
decompresses gzip compressed streams and decodes chunked data. Thirdly, it also decodes SSL andTLS encryption by exchanging the secret key of encryption algorithm with servers or clients.
Fourthly, it obtains needed character strings by using regular expression-based string matching andextraction and stores the extracted strings into high-throughput database management system.
Finally, it provides solutions by using its common API, which enables to open the obtained strings as
contents of the network traffic. This processes can solve the given problems. However, actually,
Internet traffic includes private information. The information should be preserved from theperspective of privacy protection. SoR also provides services for this protection, such asanonymization function and water printing function of the anonymized data.
Network neutrality problem will be solved by making businesses of network carriers using thedata provided by SoR. SoR can directly scan and neutralize the threat of cyber-attacks. Moreover, it
can provide new measures by using the Internet traffic access patterns for the scan. As an innovativetechnology, SoR can seize the current behavior or taste of users in the manner of inter-domain
analysis. Adding to the general end-to-end services, SoR can shift the service application location
appropriately in the hierarchy of the network without changing destination IP addresses of a stream
generated by IoT devices. As an example of network-oriented services, SoR provides flexible CDN(Contents Delivery Network). As more fundamental services of CDN, SoR can provide CCN(Contents Centric Network), which releases the limitation of IP addresses in routing process bycoexisting with the conservative Internet. SoR can improve the real-time specifications of services byshifting the cloud services to switches/routers services which are closer to IoT devices by usingon-the-fly information. SoR can provide an anonymization service on the Internet, and it can change
the Internet from data hell of privacy violation to data heaven of privacy encapsulation. Theseservices can be provided to even low-power low-performance IoT devices. SoR is a revolution network
device, which enables these new services.