The Research Of Access Control Mechanism In Information-Centric Networking

The Information-Centric Networking(ICN)is an architecture of the future network.Compared with the current TCP/IP network architecture,the ICN has great advantages in terms of mobility,security and scalability.The ICN shifts the communication model from the traditional address-centric network paradigm to the information-centric network paradigm.In addition,the ICN introduces many new features,such as the in-network caching.However,this appealing function of ICN architecture results in a serious challenge in security:how to ensure the content cached in intermediate routers is only accessible to authorized users?Therefore,it is extremely important to design an effective access control mechanism as well as ensure the cache efficiency.In this dissertation,a new access control mechanism is proposed,which is based on the characteristics of in-network caching in ICN.And this dissertation elaborates the design framework and working principle of the access control mechanism.On this basis,an encoding-based access control method is put forward.Now the main contents of this dissertation are summarized as follows:1.Aiming at the security problems leaded by ICN in-network caching feature,this dissertation designs a new access control mechanism that only allows authorized users to obtain content from node cache data,while unauthorized users cannot do it.And it effectively solves the problems of user revocation and leaking keys by malicious users.2.For the intranet caching feature of the Information-Centric Networking,a coding-based access control method is designed in the access control mechanism proposed in this dissertation.While utilizing the characteristics of the intranet caching,the encryption of the content through a cryptographic algorithm can be implemented.The original content can be decrypted by various decryption keys.And a hybrid encoding-based access control strategy is proposed and a specific coding algorithm,path finding algorithm and key generation algorithm are designed.3.The access control method put forward in the dissertation is conducted in numerically analyzed,simulated experimental and real platform experimental,which is compared with other access control strategies.Through experimental analysis and numerical comparison,it has great advantages in terms of security,content distribution efficiency,and storage load.