Abstract:Information centric networking (ICN) has been regarded as an ideal architecture for the next-generation network to handle users' increasing demand for content delivery with in-network cache. While making better use of network resources and providing better service delivery, an effective access control mechanism is needed due to the widely disseminated contents. However, in the existing solutions, making cache-enabled routers or content providers authenticate users' requests causes high computation overhead and unnecessary delay. Also, the straight-forward utilization of advanced encryption algorithms makes the system vulnerable to DoS attacks. Besides, privacy protection and service accountability are rarely taken into account in this scenario. In this paper, we propose SEAF, a secure, efficient, and accountable edge-based access control framework for ICN, in which authentication is performed at the network edge to block unauthorized requests at the very beginning. We adopt group signature to achieve anonymous authentication and use hash chain technique to reduce greatly the overhead when users make continuous requests for the same file. At the same time, we provide an efficient revocation method to make our framework more robust. Furthermore, the content providers can affirm the service amount received from the network and extract feedback information from the signatures and hash chains. By formal security analysis and the comparison with related works, we show that SEAF achieves the expected security goals and possesses more useful features. The experimental results also demonstrate that our design is efficient for routers and content providers and bring in only slight delay for users' content retrieval.

Proxy Re-Encryption in Access Control Framework of Information-Centric Networks.

Hybrid-Coding Based Content Access Control for Information-Centric Networking

A Secure, Efficient, and Accountable Edge-Based Access Control Framework for Information Centric Networks

Mandatory Content Access Control for Privacy Protection in Information Centric Networks

AccConF: an Access Control Framework for Leveraging In-Network Cached Data in the ICN-Enabled Wireless Edge

Session-based Access Control in Information-Centric Networks: Design and Analyses.

A New Proxy Re-Encryption Scheme for Protecting Critical Information Systems

Protecting Access Privacy of Cached Contents in Information Centric Networks

SGX-ICN: A Secure and Privacy-Preserving Information-Centric Networking with SGX Enclaves

A CCA-Secure Multi-use Identity-Based Proxy Re-encryption Scheme

Enforcing Access Control in Information-Centric Edge Networking

SCD2: Secure Content Delivery and Deduplication with Multiple Content Providers in Information Centric Networking

SCCR: a Generic Approach to Simultaneously Achieve CCA Security and Collusion-Resistance in Proxy Re-Encryption.

Optimal Cache Management and Routing for Secure Content Delivery in Information-Centric Networks with Network Coding.

Secure Distribution of Protected Content in Information-Centric Networking

Privacy Protection in ICNs: A Survey

Efficient Asymmetric Index Encapsulation Scheme for Anonymous Content Centric Networking

Information-centric networking with built-in network coding to achieve multisource transmission at network-layer

Strongly Secure and Cost-Effective Certificateless Proxy Re-encryption Scheme for Data Sharing in Cloud Computing

Security Analysis of Two Identity Based Proxy Re-encryption Schemes in Multi-user Networks.

Multi-use and unidirectional identity-based proxy re-encryption schemes