Provisioning Time-Based Subscription in NDN: A Secure and Efficient Access Control Scheme
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , , , , , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2025
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866912205571620864 |
|---|---|
| author | Sultan, Nazatul H. Kumar, Chandan Dulal, Saurab Varadharajan, Vijay Camtepe, Seyit Nepal, Surya |
| author_facet | Sultan, Nazatul H. Kumar, Chandan Dulal, Saurab Varadharajan, Vijay Camtepe, Seyit Nepal, Surya |
| contents | This paper proposes a novel encryption-based access control mechanism for Named Data Networking (NDN). The scheme allows data producers to share their content in encrypted form before transmitting it to consumers. The encryption mechanism incorporates time-based subscription access policies directly into the encrypted content, enabling only consumers with valid subscriptions to decrypt it. This makes the scheme well-suited for real-world, subscription-based applications like Netflix. Additionally, the scheme introduces an anonymous and unlinkable signature-based authentication mechanism that empowers edge routers to block bogus content requests at the network's entry point, thereby mitigating Denial of Service (DoS) attacks. A formal security proof demonstrates the scheme's resistance to Chosen Plaintext Attacks (CPA). Performance analysis, using Mini-NDN-based emulation and a Charm library implementation, further confirms the practicality of the scheme. Moreover, it outperforms closely related works in terms of functionality, security, and communication overhead. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2501_15975 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Provisioning Time-Based Subscription in NDN: A Secure and Efficient Access Control Scheme Sultan, Nazatul H. Kumar, Chandan Dulal, Saurab Varadharajan, Vijay Camtepe, Seyit Nepal, Surya Cryptography and Security E.3; C.2.2 This paper proposes a novel encryption-based access control mechanism for Named Data Networking (NDN). The scheme allows data producers to share their content in encrypted form before transmitting it to consumers. The encryption mechanism incorporates time-based subscription access policies directly into the encrypted content, enabling only consumers with valid subscriptions to decrypt it. This makes the scheme well-suited for real-world, subscription-based applications like Netflix. Additionally, the scheme introduces an anonymous and unlinkable signature-based authentication mechanism that empowers edge routers to block bogus content requests at the network's entry point, thereby mitigating Denial of Service (DoS) attacks. A formal security proof demonstrates the scheme's resistance to Chosen Plaintext Attacks (CPA). Performance analysis, using Mini-NDN-based emulation and a Charm library implementation, further confirms the practicality of the scheme. Moreover, it outperforms closely related works in terms of functionality, security, and communication overhead. |
| title | Provisioning Time-Based Subscription in NDN: A Secure and Efficient Access Control Scheme |
| topic | Cryptography and Security E.3; C.2.2 |
| url | https://arxiv.org/abs/2501.15975 |