poster

Public Access

NAC: name-based access control in named data networking

Authors:

Lixia ZhangAuthors Info & Claims

ICN '17: Proceedings of the 4th ACM Conference on Information-Centric Networking

Pages 186 - 187

https://doi.org/10.1145/3125719.3132102

Published: 26 September 2017 Publication History

PDF eReader

Abstract

As a proposed Internet architecture, Named Data Networking must provide effective security support: data authenticity, confidentiality, and availability. This poster focuses on supporting data confidentiality via encryption. The main challenge is to provide an easy-to-use key management mechanism that ensures only authorized parties are given the access to protected data. We describe the design of name-based access control (NAC) which provides automated key management by developing systematic naming conventions for both data and cryptographic keys. We also discuss an enhanced version of NAC that leverages attribute-based encryption mechanisms (NAC-ABE) to improve the flexibility of data access control and reduce communication, storage, and processing overheads.

References

[1]

John Bethencourt, Amit Sahai, and Brent Waters. 2007. Ciphertext-policy attribute-based encryption. In Proc. of IEEE Symposium on Security and Privacy.

Digital Library

Google Scholar

[2]

Mihaela Ion, Jianqing Zhang, and Eve M. Schooler. 2013. Toward Content-centric Privacy in ICN: Attribute-based Encryption and Routing. In Proceedings of the 3rd ACM SIGCOMM Workshop on Information-centric Networking.

Digital Library

Google Scholar

[3]

Amit Sahai and Brent Waters. 2005. Fuzzy identity-based encryption. In Proc. of Conference on the Theory and Applications of Cryptographic Techniques. 457--473.

Digital Library

Google Scholar

[4]

Jeff Thompson et al. 2017. NDN-CCL API. https://github.com/named-data/NDN-CCL-API. (2017).

Google Scholar

[5]

Yingdi Yu, Alexander Afanasyev, and Lixia Zhang. 2016. Name-based access control. Technical Report NDN-0034, Revision 2.

Google Scholar

[6]

Lixia Zhang, Alexander Afanasyev, Jeffrey Burke, Van Jacobson, Patrick Crowley, Christos Papadopoulos, Lan Wang, Beichuan Zhang, et al. 2014. Named Data Networking. ACM SIGCOMM Computer Communication Review (2014).

Google Scholar

[7]

Zhiyi Zhang and Yukai Tu. 2017. NAC-ABE Codebase. https://github.com/Zhiyi-Zhang/NAC-ABE. (2017).

Google Scholar

Cited By

View all

Li MXue JWang YMa RHuo W(2023)NACDA: Naming-Based Access Control and Decentralized Authorization for Secure Many-to-Many Data SharingElectronics10.3390/electronics1207165112:7(1651)Online publication date: 31-Mar-2023
https://doi.org/10.3390/electronics12071651
Park CPark WWoo S(2023)Security Bootstrapping for Securing Data Plane and Control Plane in Named Data NetworkingIEEE Transactions on Network and Service Management10.1109/TNSM.2022.323235920:3(3765-3781)Online publication date: Sep-2023
https://doi.org/10.1109/TNSM.2022.3232359
Seo EKim HKrishnamachari BElmroth E(2023)An ICN-Based Data Marketplace Model Based on a Game Theoretic Approach Using Quality-Data Discovery and Profit OptimizationIEEE Transactions on Cloud Computing10.1109/TCC.2022.318844711:2(2110-2126)Online publication date: 1-Apr-2023
https://doi.org/10.1109/TCC.2022.3188447
Show More Cited By

Index Terms

NAC: name-based access control in named data networking
1. Networks
  1. Network architectures
    1. Network design principles
      1. Naming and addressing
2. Security and privacy
  1. Security services
    1. Access control

Recommendations

CSCAC: one constant-size CPABE access control scheme in trusted execution environment

The popularity of versatile mobile devices has been increasing concerns about their security. How to protect the sensitive data is an urgent issue to be solved. Ciphertext-policy attribute-based encryption (CPABE) is a practical method for encrypting ...
PBDM: a flexible delegation model in RBAC
SACMAT '03: Proceedings of the eighth ACM symposium on Access control models and technologies

Role-based access control (RBAC) is recognized as an efficient access control model for large organizations. Most organizations have some business rules related to access control policy. Delegation of authority is among these rules. RBDM0 and RDM2000 ...
TRO-CP-ABE: a secure and flexible layer with traceability and easy revocation in ciphertext-policy attribute-based encryption

Attribute-based encryption (ABE) is a very efficient way of authorising users to access confidential data in organisations without public-key validation from external trusted authorities or complex login processes. Ciphertext-policy attribute-based ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

ICN '17: Proceedings of the 4th ACM Conference on Information-Centric Networking

September 2017

239 pages

ISBN:9781450351225

DOI:10.1145/3125719

General Chairs:
Thomas C. Schmidt
HAW Hamburg, DE
,
Jan Seedorf
HFT Stuttgart, DE

Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 26 September 2017

Check for updates

Author Tags

Qualifiers

Poster

Funding Sources

National Science Foundation

Conference

ICN '17

Sponsor:

SIGCOMM

ICN '17: 4th International Conference on Information-Centric Networking

September 26 - 28, 2017

Berlin, Germany

Acceptance Rates

Overall Acceptance Rate 133 of 482 submissions, 28%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

23
Total Citations
View Citations
515
Total Downloads

Downloads (Last 12 months)113
Downloads (Last 6 weeks)14

Reflects downloads up to 10 Dec 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Li MXue JWang YMa RHuo W(2023)NACDA: Naming-Based Access Control and Decentralized Authorization for Secure Many-to-Many Data SharingElectronics10.3390/electronics1207165112:7(1651)Online publication date: 31-Mar-2023
https://doi.org/10.3390/electronics12071651
Park CPark WWoo S(2023)Security Bootstrapping for Securing Data Plane and Control Plane in Named Data NetworkingIEEE Transactions on Network and Service Management10.1109/TNSM.2022.323235920:3(3765-3781)Online publication date: Sep-2023
https://doi.org/10.1109/TNSM.2022.3232359
Seo EKim HKrishnamachari BElmroth E(2023)An ICN-Based Data Marketplace Model Based on a Game Theoretic Approach Using Quality-Data Discovery and Profit OptimizationIEEE Transactions on Cloud Computing10.1109/TCC.2022.318844711:2(2110-2126)Online publication date: 1-Apr-2023
https://doi.org/10.1109/TCC.2022.3188447
Podder PNeishaboori AGupta SAfanasyev A(2023)SPA: A Scalable Pedestrian-awareness Application using NDN over CV2X2023 International Conference on Computing, Networking and Communications (ICNC)10.1109/ICNC57223.2023.10074070(249-253)Online publication date: 20-Feb-2023
https://doi.org/10.1109/ICNC57223.2023.10074070
Kharjana MPohrmen FSahana SSaha G(2023)Blockchain-based key management system in Named Data Networking: A surveyJournal of Network and Computer Applications10.1016/j.jnca.2023.103732220(103732)Online publication date: Nov-2023
https://doi.org/10.1016/j.jnca.2023.103732
Quevedo JCorujo D(2022)Selective Content Retrieval in Information-Centric NetworkingSensors10.3390/s2222874222:22(8742)Online publication date: 12-Nov-2022
https://doi.org/10.3390/s22228742
Ambalavanan UGrewe DNayak NLiu LMohan NOtt JSchulzrinne HWählisch MZhang L(2022)DICerProceedings of the 9th ACM Conference on Information-Centric Networking10.1145/3517212.3558084(45-55)Online publication date: 6-Sep-2022
https://dl.acm.org/doi/10.1145/3517212.3558084
Yu TXie HLiu SMa XJia XZhang LSchulzrinne HWählisch MZhang L(2022)CertRevokeProceedings of the 9th ACM Conference on Information-Centric Networking10.1145/3517212.3558079(80-90)Online publication date: 6-Sep-2022
https://dl.acm.org/doi/10.1145/3517212.3558079
Kang PWenzhong YDing T(2022)Blockchain Document Forwarding and Proof Method Based on NDN NetworkIEEE Access10.1109/ACCESS.2022.317899210(75312-75322)Online publication date: 2022
https://doi.org/10.1109/ACCESS.2022.3178992
Alzahrani B(2022)Self-protected content for information-centric networking architectures using verifiable credentialsTelecommunication Systems10.1007/s11235-021-00874-yOnline publication date: 9-Jan-2022
https://doi.org/10.1007/s11235-021-00874-y
Show More Cited By

View Options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Cited By

Index Terms

Recommendations

CSCAC: one constant-size CPABE access control scheme in trusted execution environment

PBDM: a flexible delegation model in RBAC

TRO-CP-ABE: a secure and flexible layer with traceability and easy revocation in ciphertext-policy attribute-based encryption