命名数据网络中基于用户位置分组的广播加密访问控制方案

User Location based Broadcast Encryption-Access Control in NDN

摘要:

广播加密是命名数据网络中实现内容访问控制的一类重要方法,利用广播加密,可实现群组内内容的共享,但是现有随机分组策略导致缓存内容副本冗余增加,严重制约了网络性能。鉴于此,提出了基于用户位置分组的广播加密访问控制方案,通过修改兴趣包结构,加入TraceRouteTag字段确定用户在网络中的相对位置,将同一区域内的用户尽可能分到同一组,并针对不同的组进行基于广播加密的访问控制,提高了缓存利用率。ndnSIM仿真结果表明,相较于随机分组,基于用户拓扑位置分组的广播加密方案,提高了缓存利用率,降低了内容获取的时间开销。

Abstract:

Broadcast encryption is an important method to implement content access control in Named Data Networking. Through Broadcast encryption, content can be safely shared within network. However, existing Random Grouping Strategy result in increased redundancy of content replicas in the network. which seriously restricts network performance. In view of this, a User Location Grouping based Broadcast Encryption Access Control in NDN (ULBBE-AC)is proposed in this paper. By modifying the interest packet structure, a TraceRouteTag field is added to the interest packet, which is used to determine the user’s relative position in the network topology. In ULBBE-AC, the users in the same area will be divided into the same group as much as possible and broadcast encryption-based access control is performed for different groups, which improves cache utilization. The simulation results of ndnSIM show that compared with Radom Group Broadcast Encryption-Access Control, ULBBE-AC improves cache utilization and reduces the time cost of content acquisition.