Blockchain Privacy Protection for Content Centric Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional privacy protection methods for content-centric networks (CCNs) rely on third-party entities, leading to trust issues, single points of failure, and privacy leakage due to collusion, which are inefficient and insecure.
Innovation Solution
A blockchain-based privacy protection method using ciphertext-policy attribute-based encryption (CP-ABE) with a decentralized blockchain to record access policies, enabling user self-authentication, non-repudiation, and efficient data sharing, while supporting attribute revocation and distributed access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a third party is used to control access to content in a CCN, then access control and privacy protection can be implemented, but trust issues, single points of failure, and privacy leakage due to collusion occur
Solution Approach 1:
The system enables users to perform self-authentication using their own attributes and private keys stored locally. Users can independently verify access policies and decrypt content without requiring a third party to mediate each access request. This eliminates the single point of failure while maintaining access control functionality.
Solution Approach 2:
The access control system is segmented into multiple independent attribute authorities, each managing specific attributes. This distributed architecture eliminates the single point of failure problem associated with a centralized third party, while the modular structure keeps system complexity manageable through clear separation of responsibilities.
2Reliability
If CP-ABE is used for fine-grained access control, then privacy protection is improved, but computational overhead and content retrieval delay increase
Solution Approach 1:
Access policies are pre-encrypted into ciphertext using CP-ABE during content publication. The encryption incorporates access control rules directly into the ciphertext structure, allowing for efficient later verification and decryption operations without requiring complex real-time computations during content retrieval.
Solution Approach 2:
The system replaces traditional cryptographic verification mechanisms with attribute-based decryption using bilinear pairings. This substitution enables more efficient verification of access policies by leveraging mathematical properties of pairing-based cryptography, reducing computational overhead during content access operations.
3Ease of manufacture
If a centralized database is used for storing access policies, then implementation is simplified, but single points of failure and security vulnerabilities occur
Solution Approach 1:
The centralized database is segmented into multiple distributed attribute authorities that store different portions of access control information. Each authority independently manages specific attributes, eliminating the single point of failure while the modular design maintains implementation simplicity through standardized interfaces.
Solution Approach 2:
The system introduces attribute authorities as intermediaries between content publishers and users. These authorities mediate the access control process by verifying attributes and enabling decryption, distributing the functionality previously concentrated in a single database while maintaining systematic coordination.
4Ease of operation
If third-party servers are involved in key management, then key distribution is simplified, but trust establishment costs increase and security relies heavily on the third party
Solution Approach 1:
Users generate and securely store their own private keys locally without requiring third-party key management servers. The system enables self-service key generation and management, eliminating the trust dependency on external key distributors while maintaining simplified key distribution through public key infrastructure.
Solution Approach 2:
Instead of third parties distributing keys to users, the system inverts the model by having users generate their own keys and the system distributing public keys and access policies. This inversion eliminates the single point of trust while maintaining operational simplicity through reversed key management flows.
Data Source
AI summary
A blockchain-based privacy protection method for a CCN includes: executing, by a trusted AAC, an initialization algorithm to generate common parameters and a master key, generating a public key and a private key for each consumer and publisher, and randomly generating, by the trusted AAC, its own public key and private key; calculating a public key, and generating ciphertext and uploading the ciphertext to a CSP; performing transaction on-chaining; and during decryption, finding, by the consumer, transaction information of the content on the consortium blockchain, sending an interest packet based on the transaction information, and obtaining ciphertext CT through a storage address in the transaction information; generating, by the consortium blockchain, an access transaction based on access information of the consumer; sending the ciphertext CT to the consumer through a data packet; and locally decrypting, by the consumer, the ciphertext CT, and verifying correctness of the content.