This document describes an extension of Extensible Provisioning Protocol (EPP) domain name mapping for the provisioning and management of strict bundling registration of domain names. Specified in XML, this mapping extends the EPP domain name mapping to provide additional features required for the provisioning of bundled domain names.

Traditional leader based and decentralized algorithm for solving Byzantine consensus exists the problem of low fault tolerance and high message complexity during the process of solving legitimacy verification.In order to solve these problems,this paper proposes a new blockchain consistency algorithm.It introduces two-phrase commit and quorum voting,using the characteristics of distributed ledge in Blockchain protocol to solve legitimacy verification and ultimate consistency is proved later on.Experimental result shows that compared with traditional Byzantine consensus protocol,this algorithm reduces the complexity of message passing and improves the system fault tolerance rate.

The Domain Name System(DNS)is an indispensable infrastructure for the stable operation of the Internet.It translates the easy-to-remember domain names to IP addresses of Internet resources.However,DNS is plagued by security issues due to its openness.Privacy is a hot issue in recent years.By reviewing the DNS query operation,this paper analyzes the potential privacy risks in every link of the DNS query,and finds that the privacy attacks on the DNS are mainly the eavesdropping on the links and the privacy collection on the servers.Combined with the related researches on DNS privacy in recent years,this paper analyzes the privacy data that may be leaked on DNS,the impact scope and the possible harm. The various solutions that are known are sorted out,the performance of reliability,anonymity and deployability of these solutions are analyzed.At last some suggestions for follow-up studies from the technical level,deployment difficulty level and legal level are provided.

Food safety has drawn worldwide attention because of its enormous impact on human health and social stability. Although traceability systems based on Internet of Things (IoT) can improve the visibility of the food supply chain, the trust service is necessary to ensure the data origin and data integrity. This paper proposes a food traceability system supported by a trust service based on Domain Name System Security Extensions(DNSSEC). A DNSSEC-enabled traceability system is implemented for food safety in China. In the traceability system, the master data and event data of the products is stored in distributed databases owned and managed by the enterprises respectively in the supply chain. Enterprise oriented Internet of Things Information Service (iotIS) is an important component of the distributed traceability system. A trust service for the Internet of Things, iotTS, is proposed to guarantee the data integrity. With this service, it can be ensured that the information stored in the enterprise database is original and has never been manipulated. Lightweight public keys are distributed based on the DNSSEC in this solution. Compared with the existing solutions, the proposed solution has better scalability and credibility.

This document enables DNS initiators to send a main question accompanying with several related questions in a single DNS query, and enables DNS responders to put the answers into a single DNS response. This extension enables a range of initiators to look up X, or failing that, Y in a better way than both current alternatives. This mechanism can reduce the number of DNS round- trips per application work-unit.

Wireless upload services are characterized by rapidly time varying channel conditions and wide size difference in pre-uploaded content generated by the end users. Therefore traditional static cache method used in large content delivery may not apply to wireless upload services. For example, uploading small content to the data center that is closer to the end users especially comparatively well behaved transmission links, caching may impose an extra load on the system that will decrease system efficiency and consume more energy. In this paper, an Adaptive Upload Acceleration Mechanism (AUAM) that can dynamically calculate the Necessity of Caching (NOC) is proposed. NOC is the basic factor to determine whether or not to use caches to accelerate the pre-uploaded content. We tried to find the trade-off between cache access reduction and user experience improvement, which depends on the channel conditions and uploaded data size. In addition, we described the implementation of the AUAM and compared with the traditional static cache method. Through analysis supported by practical upload tests with TD-SCDMA mobile network at China Mobile Labs, it was found that the number of cache access could be reduced to about 53% and the upload speed could be maintained at the same level as traditional static cache method when pre-uploaded content ranges from 10k to 80k bytes.

Autonomic networking is a promising solution to handle the ever-increasing management complexity of dynamic network environments. This article elaborates on two autonomic networking architectures and current standardization activities revolving around them.

This paper proposed DS for providing the mapping service between objects’RFID identifiers and the addresses of the information servers (IS)which stored information about them,for the purpose of helping the users obtained the information of objects across supply chain.However,the existing DS solutions couldn’t satisfy the requirements of being compatible with different RFID standards,high performance and resilience to DoS attack.Therefore,this paper proposed a novel DS solution called PCacheDS based on structured P2P(peer-to-peer)network,and PCache proactive caching algorithm to solve the disad-vantages of the existing DS solutions.The result of simulation experiment shows that,compared with the existing DS solutions, PCacheDS is not only compatible with different RFID standards,but also has the advantages of lower average query delay, higher system performance and resilience to DoS attack,which satisfies the DS requirements better.

This mapping, an extension to EPP object mappings like the EPP domain name mapping [RFC5731], to support assigning a reseller to any existing object (domain, host, contact) as well as any future objects. Specified in Extensible Markup Language (XML), this extended mapping is applied to provide additional features required for the provisioning of resellers.

Two or more DNS names may have the same DNS administrative boundaries. This document adds the function of lookup of domain name administrative boundary to domain name system, which describes a new method for using dbound resource record for judging domain name administrative boundaries.

Connecting LP-WANs(Low-Power Wide Area Networks) to the Internet is expected to provide significant benefits to these networks in terms of interoperability, application deployment, and management,among others. However, the specific characteristics of LP-WANs, such as very limited data unit size, and large-scale data sets make the network operation more complex: using one IP packet to send one LP- WAN data unit is a waste of bandwidth(because the packet header is much bigger than payload), and the large-scale LP-WAN data sets can also increase the Internet burden. This specification defines a Data Aggregation Unit(DAU) for LP-WANs to aggregate small-size date units into bigger data chains so they can be sent through the Internet more efficiently.

The Registration Data Access Protocol (RDAP) provides RESTful web services to retrieve registration metadata from Domain Name and Regional Internet Registries. This document describes information security services, including access control, authentication, authorization, availability, data confidentiality, and data integrity for RDAP.

Many DNS recursive resolvers have long round trip times to the DNS root server. It has been an obstacle to increse the performance of DNS query. In order to decrease fetch time of DNS root data, this document proposes a new mechanism by improving the mechanism of root data cacheing.

The Extensible Provisioning Protocol (EPP) includes features to add functionality by extending the protocol. It does not, however, describe how those extensions are managed. This document describes a procedure for the registration and management of extensions to EPP, and it specifies a format for an IANA registry to record those extensions.

This document is one of a collection that together describes the Registration Data Access Protocol (RDAP). It describes how RDAP is transported using the Hypertext Transfer Protocol (HTTP). RDAP is a successor protocol to the very old WHOIS protocol. The purpose of this document is to clarify the use of standard HTTP mechanisms for this application.

WHOIS output objects from registries, including both Regional Internet Registries (RIRs) and Domain Name Registries (DNRs), were collected and analyzed. This document describes the process and results of the statistical analysis of existing WHOIS information. The purpose of this document is to build an object inventory to facilitate discussions of data objects included in Registration Data Access Protocol (RDAP) responses.

Radio Frequency Identification (RFID) tags have been widely used for identifying objects on a global scale. Discovery service (DS) acting as a broker between objects and their information sources needs to handle a huge amount of query requests from the user. So the performance of the node of DS must be powerful enough to handle lots of query requests sent to it. However, no performance improvement schemes for the node of DS have been proposed until now. Therefore this paper proposes a novel performance improvement scheme for the node of DS based on anycast and Distributed Hash Table (DHT) network. By analysis, the performance improvement scheme proposed in this paper can not only significantly improve the performance of the node of DS but also has the advantages of shortening its response time, avoiding the adverse influence of ISP-unfriendly policies and being transparent to the user, which satisfies the actual requirements pretty well.

Internet of Things (IoT) technologies have a great potential to improve the safety and quality of agricultural products. By providing near continuous monitoring from planting through harvesting and to our homes, IoT technologies are able to provide farm to fork visibility with all of the resulting benefits that accrue from that visibility. Unique identification provides the foundation of these benefits with a name service enabling efficient storage and retrieval of the data associated with each identifier. In this work, we present iotNS, a simple, efficient enterprise-oriented name service designed for agricultural products. The iotNS provides five times faster response than the standard GS1 ONS system. The iotNS has been deployed across five cities to enable the efficient storage and retrieval of information about agricultural products as they are tracked from the farm to the market. The deployment has shown that the visibility provided by iotNS is a mechanism that fosters cooperation and supply chain improvements among the enterprises using the iotNS.

RFID tags are widely used in recent years. Discovery service (DS) for RFID Network is a pivotal system that serves the following lookup function: Given the RFID identifier of an object, it returns a list of Internet addresses of servers which offer detailed information about this object. The existing researches on DS have severe drawbacks in being compatible with different RFID standards and scalability. Therefore in this paper, a novel DS solution based on DHT is proposed to solve those problems. Moreover, any cast technique is adopted to further improve its performance. Compared with the existing researches on DS, our DS solution is compatible with different RFID standards and has better scalability. By experiment, the average service time of our DS system is close to that of the existing DS systems based on DHT, which is acceptable to the user.

Discovery service (DS) is designed to serve the following lookup function: Given the RFID identifier of an object, it returns a list of Internet addresses of servers about this object across the supply chain, which offer detailed information about it. The information stored in DS is commercially sensitive, which can reveal flow patterns, trading relationships or inventory levels, etc. Therefore DS must authenticate the user's identity first before this user is allowed to access DS. However, no user identity authentication schemes satisfying the actual requirements have been proposed until now. So this paper focuses on this problem and presents Centralized User Identity Authentication Service (CUIAS) based on SAML and PKI for DS, which is deployed as a DHT network, offering excellent performance scalability. Through CUIAS, once a user is authenticated, then it can access DS many times in a certain period, which not only simplifies the user's access process but also reduces the user's resource cost. To ensure the data availability and data confidentiality of CUIAS, the original data is split into multiple smaller blocks using Information Dispersal Algorithm (IDA) and then they are scattered within CUIAS. By analysis and evaluation, CUIAS can satisfy the actual requirements and offer reliable and secure service.