Access control method based on encryption and Bloom filter in named data network

Abstract

The invention discloses an access control method based on encryption and Bloom filter in a named data network. The method comprises the following steps: forwarding a data request interest packet of aconsumer to a station or an intermediate NDN router in the named data network (NDN network); filtering the data request interest packet by using the Bloom Filter; returning the corresponding encrypteddata packet to the consumer; searching a data key, and attempting to decrypt the encrypted data packet; opening data in the case of decryption success, otherwise, sending a key request interest packet to the station, verifying the validity of the consumer, and if the consumer is valid, encrypting the data key via a public key of the consumer and returning the data key to the consumer; and decrypting the data key via a private key of the consumer, decrypting the encrypted data packet by using the decrypted data key, and opening the data in the encrypted data packet. By adoption of the technical scheme of the invention, the situation that encrypted contents are sent to an unauthorized user is avoided, the bandwidth resources are saved, and the unauthorized user is prevented from obtaining and attempting to decrypt the data.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an access control method based on encryption and Bloom filter in a named data network. Background technique [0002] At present, in NDN (named data networking, named data network), which is centered on content and whose main goal is to distribute and share content, it is far from enough to guarantee the integrity, relevance and credibility of content through digital signatures. , cannot meet the complete security requirements. Named Data Networking (NDN) shifts the Internet from today's IP-based packet delivery model to a name-based data retrieval model. The network architecture translates from IP addresses to named data, enabling efficient content delivery through in-network caching and direct retrieval of objects. However, this shift also creates challenges and obstacles to securing data objects and providing appropriate access controls over named data networks due t...

AI Technical Summary

Problems solved by technology

That is to say, a consumer with reasonable access rights can not only obtain the encrypted content by sending interest packets, but also obtain the key to decrypt the content; a consumer without corresponding access rights will not be able to obtain the decryption key, thus Unable to decrypt protected content

Images