Towards name-based trust and security for content-centric network

Authors:
Xinwen Zhang;Katharine Chang;Huijun Xiong;Yonggang Wen;Guangyu Shi;Guoqiang Wang
Affiliations:
Huawei Research Center, Santa Clara, CA, USA;University of Michigan, Ann Arbor, MI, USA;Virginia Tech, Blacksburg, VA, USA;Nanyang Technological University, Singapore;Huawei Research Center, Santa Clara, CA, USA;Huawei Research Center, Santa Clara, CA, USA
Venue:
ICNP '11 Proceedings of the 2011 19th IEEE International Conference on Network Protocols
Year:
2011

Citing 0
Cited 4

Protecting access privacy of cached contents in information centric networks

Proceedings of the 8th ACM SIGSAC symposium on Information, computer and communications security
Check before storing: what is the performance price of content integrity verification in LRU caching?

ACM SIGCOMM Computer Communication Review
A security protocol for information-centric networking in smart grids

Proceedings of the first ACM workshop on Smart energy grid security
Information centric services in Smart Cities

Journal of Systems and Software

Quantified Score

Hi-index	0.00

Visualization

Abstract

Trust and security have been considered as built-in properties for future Internet architecture. Leveraging the concept of named content in recently proposed information centric network, we propose a name-based trust and security protection mechanism. Our scheme is built with identity-based cryptography (IBC), where the identity of a user or device can act as a public key string. Uniquely, in named content network such as content-centric network (CCN), a content name or its prefixes can be used as public identities, with which content integrity and authenticity can be achieved with IBC algorithms. The trust of a content is seamlessly integrated with the verification of the content's integrity and authenticity with its name or prefix, instead of the public key certificate of its publisher. In addition, flexible confidentiality protection is enabled between content publishers and consumers. For scalable deployment purpose, we further propose to use a hybrid scheme combined with traditional public-key infrastructure (PKI) and IBC. We have implemented this scheme with CCNx open source project on Android.