A Secure, Efficient, and Accountable Edge-Based Access Control Framework for Information Centric Networks

Xue, Kaiping; He, Peixuan; Zhang, Xiang; Xia, Qiudong; Wei, Dennis; Hao, Yue; Wu, Feng

doi:10.1109/tnet.2019.2914189

Cited by 53 publications

(16 citation statements)

References 32 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Edge computing can handle a large number of data calculations. When edge computing nodes keep good quality, they have lower latency and better broadband than cloud nodes [34]. The edge can perform operations such as computing, offloading, data storage, caching, and processing.…”

Section: Edge Computingmentioning

confidence: 99%

A Secure Subscription-Push Service Scheme Based on Blockchain and Edge Computing for IoT

2022

KSII TIIS

View full text Add to dashboard Cite

As everything linking to the internet, people can subscribe to various services from a service provider to facilitate their lives through the Internet of Things (IoT). An obligatory thing for the service provider is that they should push the service data safely and timely to multiple IoT terminal devices regularly after the IoT devices accomplishing the service subscription. In order to control the service message received by the legal devices as while as keep the confidentiality of the data, the public key encryption algorithm is utilized. While the existing public encryption algorithms for push service are too complicated for IoT devices, and almost of the current subscription schemes based on push mode are relying on centralized organization which may suffer from centralized entity corruption or single point of failure. To address these issues, we design a secure subscription-push service scheme based on blockchain and edge computing in this article, which is decentralized with secure architecture for the subscription and push of service. Furthermore, inspired by broadcast encryption and multicast encryption, a new encryption algorithm is designed to manage the permissions of IoT devices together with smart contract, and to protect the confidentiality of push messages, which is suitable for IoT devices. The edge computing nodes, in the new system architecture, maintain the blockchain to ensure the impartiality and traceability of service subscriptions and push messages, meanwhile undertake some calculations for IoT devices with limited computing power. The legalities of subscription services are guaranteed by verifying subscription tags on the smart contract. Lastly, the analysis indicates that the scheme is reliable, and the proposed encryption algorithm is safe and efficient.

show abstract

Section: Edge Computingmentioning

confidence: 99%

A Secure Subscription-Push Service Scheme Based on Blockchain and Edge Computing for IoT

2022

KSII TIIS

View full text Add to dashboard Cite

show abstract

“…Such decisions will depend a lot on whether PD-ICN nodes will be realized as standalone routers, or will be software driven hosted at a datacenter/IXP. Open Questions: Different privacy preserving naming schemes already exists based on different encryption schemes, such as, hash chain [58] and symmetric encryption [3,48], nevertheless, due to the complex functionality of PD-ICN, two open question need to be answered. (1) How to construct a general purpose naming scheme for personal data that allows all the different functionalities that PD-ICN provides?…”

Section: Data Layer (Dl)mentioning

confidence: 99%

“…Open Questions: Data encryption in ICN networks is heavily depended on the Naming and Routing scheme [3,48,53,58]. In addition, in PD-ICN we also have to deal with additional constrains.…”

Section: Data Layer (Dl)mentioning

confidence: 99%

What do information centric networks, trusted execution environments, and digital watermarking have to do with privacy, the data economy, and their future?

Laoutaris

Iordanou

2021

SIGCOMM Comput. Commun. Rev.

View full text Add to dashboard Cite

What if instead of having to implement controversial user tracking techniques, Internet advertising & marketing companies asked explicitly to be granted access to user data by name and category, such as Alice→Mobility→05-11-2020? The technology for implementing this already exists, and is none other than the Information Centric Networks (ICN), developed for over a decade in the framework of Next Generation Internet (NGI) initiatives. Beyond named access to personal data, ICN's in-network storage capability can be used as a substrate for retrieving aggregated, anonymized data, or even for executing complex analytics within the network, with no personal data leaking outside. In this opinion article we discuss how ICNs combined with trusted execution environments and digital watermarking, can be combined to build a personal data overlay inter-network in which users will be able to control who gets access to their personal data, know where each copy of said data is, negotiate payments in exchange for data, and even claim ownership, and establish accountability for data leakages due to malfunctions or malice. Of course, coming up with concrete designs about how to achieve all the above will require a huge effort from a dedicated community willing to change how personal data are handled on the Internet. Our hope is that this opinion article can plant some initial seeds towards this direction.

show abstract

“…Also, they can transfer heavy computation to the user equipment. To reduce computation overhead and delay in Information-Centric Networking (ICN) authentication, a secure, efficient, and accountable edge access control scheme was designed by adopting group signature and hash chain techniques [31]. This framework not only reduced overhead but also provided service accountability.…”

Section: B Access Control Technologymentioning

confidence: 99%

A Smart Collaborative Authentication Framework for Multi-Dimensional Fine-Grained Control

Liu

et al. 2020

IEEE Access

View full text Add to dashboard Cite

The emergence of the 5G network has brought broad prospects for the massive terminal access and ubiquitous Internet of Things (IoTs). Potential attacking opportunities triggered by this progress are severely impacting the security fortress of current networks, especially in the edge access part. However, due to the unitary protection and inferior isolation, available security schemes are incapable of effectively eliminating these hidden perils. Motivated by these facts, we propose a Multi-dimensional Fine-grained Control (MFC) framework to strengthen safety and reliability in Radio Access Networks (RANs). First, we comprehensively survey and summarize the existing security schemes to grasp respective effects and limitations. Second, the MFC framework is established to describe the model structure and implementation processes. An identifier mapping mechanism is designed to achieve network isolation. We perform the security analysis of MFC by theoretically comparing diversified policies. Third, an integrated set of the authentication prototype system is created with wireless environment parameters settings. Specific verification scenarios are illustrated. Finally, we test the performances of the MFC framework. Validation results demonstrate that the proposed scheme can accomplish reliable security control at the access side. Comparing to multiple schemes, the performances, in terms of time and concurrency, are optimized. Therefore, the MFC framework is feasible for applications in 5G or IoT.

show abstract

A Secure, Efficient, and Accountable Edge-Based Access Control Framework for Information Centric Networks

Cited by 53 publications

References 32 publications

A Secure Subscription-Push Service Scheme Based on Blockchain and Edge Computing for IoT

A Secure Subscription-Push Service Scheme Based on Blockchain and Edge Computing for IoT

What do information centric networks, trusted execution environments, and digital watermarking have to do with privacy, the data economy, and their future?

A Smart Collaborative Authentication Framework for Multi-Dimensional Fine-Grained Control

Contact Info

Product

Resources

About