Knights' Content based router inspects the contents of the packet and replaces the destination address in the header to the one specified in the routing table. Thus each client receives only the data of particular interest to it. An advanced feature of our content based router is the security of information, which is achieved through encryption. The incoming packets are in encrypted format, so that even if an intruder gains access the information, it’s not understandable. The data is decrypted bferoe any processing can be done on it. And once the packet has been processed (destination decided as per the routing table & authentication performed), the data is encrypted again before it is sent to the clients.

1. Secured Content Based Routing
Team Knights
Ashita
Minnu Jose
Mohammed Nizwan
Vetri Selvi

2. E
H
A
AE
H

3. E
H
A
node 1
node2
node3
node 0
CBR

4. Secured Content Based Routing
node0
node1
node3
node 2decryption
encryption
CBR

5. Secured Content Based Routing
node0
node 1
node 3
node 2decryption
encryption
CBR

6. CipherText Plain Text
FFFFFFFFFFFFFFFF
64bit key
XOR41424344454647480053350515253545556570012348494A4B4C4D4E4F00420
BEBDBCBBBAB9B8B7FFACC
AFAEADACABAAA9A8FFEDC
B7B6B5B4B3B2B1B0FFCDF
Decryption

7. Secured Content Based Routing
node0
node 1
node 3
node 2decryption
encryption
CBR

8. Output port lookup
Outputqueue
CPU
FIFO
A0010003
XX.X.X.X
4142434445464748000000000000533
000000000000533
4142434445464748
A0010103
C code
Assembly
Machine

9. Output port lookup
Outputqueue
CPU
FIFO

10. REGISTER
FILE
INSTRUCTION
MEMORY
CONTROL
UNIT
DATA
MEMORY/FIFO
ZERO
SIGNEXT.
PC2
1
+
PC1
SW$7,$8($9)
ALU
Dual-thread Processor
THREADCONTROLUNIT
T1
T2
Content Check
User Authentication
LW$3,$2($1)ADD$4,$5,$6
SUB$5,$4,$3

11. Content Destination IP Dest.IP (HEX)
4142434445464748
5051525354555657
48494A4B4C4D4E4F
10.1.1.3
10.1.2.3
10.1.3.3
A0010103
A0010203
A0010303
User ID Valid bit
100-300
300-500
500-700
1
0
1
Dest. IP
XXXXXXXX
Source IP
A0010003
Payload
4142434445464748 005334142434445464748 00533
A0010103
Thread 1
Thread 2
Dest. IP
XXXXXXXX
Source IP
A0010003
Payload
48494A4B4C4D4E4F 0042048494A4B4C4D4E4F 00420

12. Secured Content Based Routing
node0
node 1
node 3
node 2decryption
encryption
CBR

13. Encryption
CipherTextPlain Text
FFFFFFFFFFFFFFFF
64bit key
XORBEBDBCBBBAB9B8B7FFACCAFAEADACABAAA9A8FFEDCB7B6B5B4B3B2B1B0FFCDF
414243444546474800533
505152535455565700123
48494A4B4C4D4E4F00420

14. Comparison
Conventional Router SecuredContent Based Router
No security
Highly securedby hardware acceleratedcrypto
engine
Low throughput (few Mbps) High throughput (upto 1Gbps)
High Round-trip time (~1.9ms) Low Round-trip time (~0.5ms)

15. Milestones
13 Apr
20 Apr
31 Apr
4 May
Dual-thread processorintegration into NetFPGA and
compiler re-design
Integrating IDS & Hardware Accelerated Crypto Engine into router
Packetre-routing and headermodification
Testing and verification of the design and performance
measurement
Completed
Completed
Completed
Completed

16. References
Intelligent Content-BasedRoutingfor EnhancedInternet Services bySylvanusA. Ehikioya*†,SureshJayaraman*†and
JoseA. Rueda†
UnderstandingContent-BasedRoutingSchemes
byAntonioCarzaniga AubreyJ. RembertAlexanderL.Wolf
AnEfficient MulticastProtocolfor Content-BasedPublish-Subscribe SystemsbyuruduthBanavar,TusharChandra,
BodhiMukherjee, Jay Nagarajarao,RobertE.Strom,andDanielC. Sturman
ARouting Schemefor Content-BasedNetworkingbyAntonioCarzaniga,MatthewJ.Rutherford,andAlexanderL. Wolf
NetworkArchitecturesfor Content-Based Routing bySureshJa~aramanlvanusEhikioyaandJoseA.Ruah

17. Thank You