AccConF: An Access Control Framework for Leveraging In-Network Cached Data in the ICN-Enabled Wireless Edge

Abstract

The fast-growing Internet traffic is increasingly becoming content-based and driven by mobile users, with users more interested in data rather than its source. This has precipitated the need for an information-centric Internet architecture. Research in information-centric networks (ICNs) have resulted in novel architectures, e.g., CCN/NDN, DONA, and PSIRP/PURSUIT; all agree on named data based addressing and pervasive caching as integral design components. With network-wide content caching, enforcement of content access control policies become non-trivial. Each caching node in the network needs to enforce access control policies with the help of the content provider. This becomes inefficient and prone to unbounded latencies especially during provider outages.In this paper, we propose an efficient access control framework for ICN, which allows legitimate users to access and use the cached content directly, and does not require verification/authentication by an online provider authentication server or the content serving router. This framework would help reduce the impact of system down-time from server outages and reduce delivery latency by leveraging caching while guaranteeing access only to legitimate users. Experimental/simulation results demonstrate the suitability of this scheme for all users, but particularly for mobile users, especially in terms of the security and latency overheads.

Security, Privacy, and Access Control in Information-Centric Networking: A Survey

“…It also allow efficient revocation of the clients (without content re-encryption). A secure content delivery framework, which waives the necessity of an online authentication service was proposed by Misra et al [112], [113]. The framework uses the (n, t)-Shamir's secret sharing based broadcast encryption to enforce AC.…”

“…It compares the existing mechanisms on the basis of their overhead: communication and computation, and the entities that bear the computation burden. Client revocation method, ability of cache utilization, and the entities that enforce AC are other comparison features in Table X. In this section, we reviewed the existing research in ICN AC enforcement and specifically focused on models including broadcast encryption-based [112], [113], attribute-based [121]- [125], identity-based [126]- [128] session-based [114]- [116], proxy re-encryption-based [117]- [119], and others [130]- [134] models. Although almost all the proposed mechanisms introduce communication overhead, some of the proposed mechanisms [128], [130] require extensive interactions between an AC manager and other network entities in order to enforce access constraints.…”

“…To truly exploit ICN's intrinsic provisions for content availability, an AC mechanism should refrain from using an always-online entity. The work by Misra et al [113] is the first attempt in this direction.…”

Secure Distribution of Protected Content in Information-Centric Networking

“…In earlier work [13], the authors proposed a content access control scheme for ICN enabled wireless edge. The proposed one is an extension of [14], which employs the public-key based algorithm and shamir's secret sharing as a building block, named AccConF.…”

An edge re‐encryption‐based access control mechanism in NDN

“…Misra et al proposed an access control mechanism that uses the ( n , t )‐Shamir's secret sharing‐based broadcast encryption. In this mechanism, the content producer divides the content key, a symmetric key, into ( n + t ) blocks and distributes n of them to n authorized users as their client share, remains the rest of t blocks in its enable block.…”