一种信息中心移动自组网中的数据访问控制机制

doi:10.13190/j.jbupt.2020-203

北京邮电大学学报 ›› 2021, Vol. 44 ›› Issue (2): 54-60.doi: 10.13190/j.jbupt.2020-203

• 未来网络体系架构和关键技术专题 • 上一篇下一篇

一种信息中心移动自组网中的数据访问控制机制

刘宁春¹, 郜帅^1,2, 侯心迪¹, 国兴昌¹

1. 北京交通大学电子信息工程学院, 北京 100044;
2. 鹏城实验室网络通信研究中心, 深圳 518052

收稿日期:2020-10-08 出版日期:2021-04-28 发布日期:2021-04-28
通讯作者: 郜帅(1980-),男,教授,E-mail:shgao@bjtu.edu.cn. E-mail:shgao@bjtu.edu.cn
作者简介:刘宁春(1994-),男,博士生.
基金资助:
国家重点研发计划项目（2019YFB1802503）；国家自然科学基金项目（61972026，61802014）；鹏城实验室大湾区未来网络试验与应用环境项目（LZC0019）

A Data Access Control Scheme in Information-Centric Mobile Ad Hoc Networks

LIU Ning-chun¹, GAO Shuai^1,2, HOU Xin-di¹, GUO Xing-chang¹

1. School of Electronic and Information Engineering, Beijing Jiaotong University, Beijing 100044, China;
2. Peng Cheng Laboratory Research Center of Networks and Communications, Peng Cheng Laboratory, Shenzhen 518052, China

Received:2020-10-08 Online:2021-04-28 Published:2021-04-28

摘要/Abstract

摘要： 针对信息中心移动自组网场景中节点间间歇连接和网内泛在缓存的特点，提出一种基于门限秘密共享机制的数据访问控制机制.通过构建辅助密钥块，降低了消费者解密的开销和网络节点的存储资源消耗.同时，通过引入双变量单向函数，保障了消费者子秘密份额的唯一性，减少了消费者侧秘密份额管理所带来的空间开销.仿真和理论分析结果表明，该机制显著降低了消费者侧的解密开销，良好地适应了信息中心移动自组织网络场景.

关键词: 信息中心移动自组网, 数据访问控制, 门限秘密共享, 双变量单向函数

Abstract: Aiming at the characteristics of intermittent connections between nodes and ubiquitous caching in the information-centric mobile Ad hoc networks, a data access control scheme based on threshold secret sharing scheme is proposed. By constructing an auxiliary key block, the consumer's decryption overhead and the storage resource consumption of network nodes are reduced. At the same time, by combining a two-variable one-way function, the uniqueness of the consumer's shares is guaranteed, and the cost of key management is decreased. Simulations show that this mechanism dramatically reduces the decryption overhead on the consumer side, which indicates its well suited for information-centric mobile Ad hoc network scenarios.

Key words: information-centric mobile Ad hoc network, data access control, threshold secret sharing, two-variable one-way function

中图分类号:

TP393

刘宁春, 郜帅, 侯心迪, 国兴昌. 一种信息中心移动自组网中的数据访问控制机制[J]. 北京邮电大学学报, 2021, 44(2): 54-60.

LIU Ning-chun, GAO Shuai, HOU Xin-di, GUO Xing-chang. A Data Access Control Scheme in Information-Centric Mobile Ad Hoc Networks[J]. Journal of Beijing University of Posts and Telecommunications, 2021, 44(2): 54-60.

参考文献

[1] Liu X, Li Z, Yang P, et al. Information-centric mobile Ad hoc networks and content routing:a survey[J]. Ad Hoc Networks, 2017, 58:255-268.
[2] Yu K, Eum S, Kurita T, et al. Information-centric networking:research and standardization status[J]. IEEE Access, 2019, 7:126164-126176.
[3] Zhang Z, Yu Y, Zhang H, et al. An overview of security support in named data networking[J]. IEEE Communications Magazine, 2018, 56(11):62-68.
[4] Xue K, He P, Zhang X, et al. A secure, efficient, and accountable edge-based access control framework for information centric networks[J]. IEEE/ACM Transactions on Networking, 2019, 27(3):1220-1233.
[5] Kim D, Bi J, Vasilakos A V, et al. Security of cached content in NDN[J]. IEEE Transactions on Information Forensics and Security, 2017, 12(12):2933-2944.
[6] Li Q, Zhang X, Zheng Q, et al. LIVE:lightweight integrity verification and content access control for named data networking[J]. IEEE Transactions on Information Forensics and Security, 2014, 10(2):308-320.
[7] Li B, Huang D, Wang Z, et al. Attribute-based access control for ICN naming scheme[J]. IEEE Transactions on Dependable and Secure Computing, 2016, 15(2):194-206.
[8] Hamdane B, El Fatmi S G. A credential and encryption based access control solution for named data networking[C]//2015 IFIP/IEEE International Symposium on Integrated Network Management (IM). Ottawa:IEEE, 2015:1234-1237.
[9] Liu N, Gao S, Hou N. CDAC:a collaborative data access control scheme in named data networking[C]//2019 2nd International Conference on Hot Information-Centric Networking (HotICN). Chongqing:IEEE, 2019:44-49.
[10] Misra S, Tourani R, Natividad F, et al. AccConF:an access control framework for leveraging in-network cached data in the ICN-enabled wireless edge[J]. IEEE Transactions on Dependable and Secure Computing, 2019, 16(1):5-17.
[11] Shamir A. How to share a secret[J]. Communications of the ACM, 1979, 22(11):612-613.
[12] Boneh D. The decision diffie-hellman problem[C]//International Algorithmic Number Theory Symposium. Springer:Heidelberg, 1998:48-63.
[13] He J, Dawson E. Multisecret-sharing scheme based on one-way function[J]. Electronics Letters, 1995, 31(2):93-95.
[14] Mastorakis S, Afanasyev A, Zhang L. On the evolution of ndnSIM:an open-source simulator for NDN experimentation[J]. ACM SIGCOMM Computer Communication Review, 2017, 47(3):19-33.
[15] Free Software Foundation. The GNU multiple precision arithmetic library[EB/OL]. 2020(2020-01-17)[2020-09-30]. https://gmplib.org/.

一种信息中心移动自组网中的数据访问控制机制

A Data Access Control Scheme in Information-Centric Mobile Ad Hoc Networks

RichHTML

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 1

编辑推荐

Metrics

本文评价