TSLS: Time Sensitive, Lightweight and Secure Access Control for Information Centric Networking

Xia, Qiudong; He, Peixuan; Xue, Kaiping; Han, Jiangping; Wei, Dennis; Qin, Jing

doi:10.1109/globecom38437.2019.9014220

Cited by 7 publications

(7 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We pay attention to the schemes [ 30 , 31 , 32 , 33 ] having the similar features as our proposed scheme, i.e., use of hybrid encryption, no need of trusted third party, and effective use of in-network caching mechanism. We compare our scheme with the schemes with respect to the various factors associated with the encryption-based access control in NDN, as described in Table 4 .…”

Section: Comparisonsmentioning

confidence: 99%

“…Furthermore, the computational time for the router is smaller than the content producer since the router only needs to forward and reply the packets without any computation. Thus, the consumer and the router in our scheme are free from high computational overhead compared to [ 31 , 32 , 33 ] and similar to [ 30 ], as shown in Table 4 .…”

Section: Comparisonsmentioning

confidence: 99%

“…Although all other schemes [ 30 , 31 , 32 , 33 ] fulfill the usage of in-network caching in parallel, our scheme provides content retrieval time reduction with 10% to 25% for cached content since the encrypted content is available for all consumers from the router’s cache and only key re-encryption is required at the edge router. To sum up, ES_CD provides comparable properties for content confidentiality with others schemes and guarantees effective cache utilization for every content.…”

Section: Comparisonsmentioning

confidence: 99%

“…Even NDN packets do not contain any information about the source host where they were originally sent; contents security and privacy are still needed. Different cryptographic approaches have been explored in access control solutions for NDN, such as attribute-based encryption, broadcast encryption [ 32 , 33 ], role-based encryption, identity-based encryption [ 30 , 34 ], proxy re-encryption [ 31 , 35 , 36 ], and so on [ 7 , 37 , 38 ]. These approaches are examined below.…”

Section: Related Workmentioning

confidence: 99%

“…These approaches are examined below. The key problem of [ 30 , 31 , 34 , 35 , 39 ] these schemes are the computational and communication overhead for the content producer and the consumer, while other schemes [ 32 , 33 , 36 , 40 ] do not consider user or key revocation.…”

Section: Related Workmentioning

confidence: 99%

See 4 more Smart Citations

Secure Content Distribution with Access Control Enforcement in Named Data Networking

Hlaing

Funamoto

Mambo

2021

Sensors

View full text Add to dashboard Cite

NDN is one of the new emerging future internet architectures which brings up new solutions over today’s internet architecture, facilitating content distribution, in-network caching, mobility support, and multicast forwarding. NDNs ubiquitous in-network caching allows consumers to access data directly from the intermediate router’s cache. However, it opens content privacy problems since data packets replicated in the router are always accessible by every consumer. Sensitive contents in the routers should be protected and accessed only by authorized consumers. Although the content protection problem can be solved by applying an encryption-based access control policy, it still needs an efficient content distribution scheme with lower computational overhead and content retrieval time. We propose an efficient and secure content distribution (ES_CD), by combining symmetric encryption and identity-based proxy re-encryption. The analysis shows that our proposed scheme achieves content retrieval time reduction up to 20% for the cached contents in our network simulation environment and a slight computational overhead of less than 19 ms at the content producer and 9 ms at the consumer for 2 KB content. ES_CD provides content confidentiality and ensures only legitimate consumers can access the contents during a predefined time without requiring a trusted third party and keeping the content producer always online.

show abstract