Encrypted access control method under CCN

Abstract

The invention relates to an encrypted access control method under CCN (Content Centric Networking). Broadcast encryption is adopted for encrypting data packets, so that a condition that different requesters can decrypt the same authorized content can be ensured. Data encryption effectively protects privacy of a content publisher. At the same time, the encrypted data sent by the content publisher is firstly stored in a router. A requester acquires a content mark number after authorization verification by the content publisher and then the requester performs Hash operation on a requested contentname and the content mark number. Only when an obtained Hash value is identical to that sent by the content publisher in the router, the router sends the encrypted data to the requester. The authorized requester can obtain the data packets after acquiring the request content mark number and performing Hash value calculation and after the router confirms the matching success. A requester authorized to access a part of the content cannot acquire content buffering other unknown content mark numbers.

Description

technical field [0001] The present invention relates to the technical field of content-centric network research, in particular to an encrypted access control method under the content-centric network. Background technique [0002] The rapid development of the Internet so far is mainly due to the continuous progress and development of Internet information technology, the current TCP / IP network model for data packet transmission between terminals can no longer meet the requester's demand for a large number of data services, in order to solve the problems exposed by the current Internet Such as: insufficient IP address, network attack (Dos attack, Trojan virus, etc.), poor mobility. As a result, Information Centric Networking (ICN, Information Centric Networking) was proposed. The ICN network is an information-centric network concept, abandoning the end-to-end transmission mode of the traditional IP network, and making the transmission of information the main body of the network...

AI Technical Summary

Problems solved by technology

[0004] In order to deny unauthorized users access to content, in the study of access control, literature (JACOBSON V, SMETTERS D, THOMTON J, et al.Networking named content[C] / / Proceedings of2009ACM 5th International Conference on Emerging Networking Experiments and Technologies.Rome, Italy: ACM, 2009: 1-12) proposes to use encryption to realize access control and protection content. This scheme uses symmetric encryption to encrypt data packets. The encrypted content can be cached in the router, and any requester can read from The encrypted content is obtained in the cache, but only authorized requesters can obtain the symmetric key to decrypt the data. Therefore, all authorized requesters can obtain the cached content. If the key of one of them is leaked, all encrypted content in the cache will be lost will be decrypted and access control will be invalidated

Images